Description
Multiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted typography information in a Microsoft Word .DOC file that triggers an out-of-bounds write.
References (23)
... and 3 more
Scores
EPSS
0.0856
EPSS Percentile
92.4%
Details
CWE
CWE-193
Status
published
Products (7)
apache/openoffice
2.0.0 - 3.3.0
canonical/ubuntu_linux
8.04
canonical/ubuntu_linux
9.10
canonical/ubuntu_linux
10.04
canonical/ubuntu_linux
10.10
debian/debian_linux
5.0
debian/debian_linux
6.0
Published
Jan 28, 2011
Tracked Since
Feb 18, 2026