Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer overflow.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openoffice.org | Openoffice | * | 3.1 (including) |
| Openoffice.org | Openoffice | 1.0-ru (including) | 1.0-ru (including) |
| Openoffice.org | Openoffice | 1.0.0 (including) | 1.0.0 (including) |
| Openoffice.org | Openoffice | 1.0.1 (including) | 1.0.1 (including) |
| Openoffice.org | Openoffice | 1.0.2 (including) | 1.0.2 (including) |
| Openoffice.org | Openoffice | 1.0.3.1 (including) | 1.0.3.1 (including) |
| Openoffice.org | Openoffice | 1.1 (including) | 1.1 (including) |
| Openoffice.org | Openoffice | 1.1-beta (including) | 1.1-beta (including) |
| Openoffice.org | Openoffice | 1.1-beta2 (including) | 1.1-beta2 (including) |
| Openoffice.org | Openoffice | 1.1-rc1 (including) | 1.1-rc1 (including) |
| Openoffice.org | Openoffice | 1.1-rc3 (including) | 1.1-rc3 (including) |
| Openoffice.org | Openoffice | 1.1.1 (including) | 1.1.1 (including) |
| Openoffice.org | Openoffice | 1.1.2 (including) | 1.1.2 (including) |
| Openoffice.org | Openoffice | 1.1.3 (including) | 1.1.3 (including) |
| Openoffice.org | Openoffice | 1.1.4 (including) | 1.1.4 (including) |
| Openoffice.org | Openoffice | 1.1.5 (including) | 1.1.5 (including) |
| Openoffice.org | Openoffice | 1.9.84 (including) | 1.9.84 (including) |
| Openoffice.org | Openoffice | 1.9.87 (including) | 1.9.87 (including) |
| Openoffice.org | Openoffice | 1.9.91 (including) | 1.9.91 (including) |
| Openoffice.org | Openoffice | 1.9.93 (including) | 1.9.93 (including) |
| Openoffice.org | Openoffice | 1.9.95 (including) | 1.9.95 (including) |
| Openoffice.org | Openoffice | 1.9.100 (including) | 1.9.100 (including) |
| Openoffice.org | Openoffice | 1.9.104 (including) | 1.9.104 (including) |
| Openoffice.org | Openoffice | 1.9.113 (including) | 1.9.113 (including) |
| Openoffice.org | Openoffice | 1.9.118 (including) | 1.9.118 (including) |
| Openoffice.org | Openoffice | 1.9.122 (including) | 1.9.122 (including) |
| Openoffice.org | Openoffice | 1.9.130 (including) | 1.9.130 (including) |
| Openoffice.org | Openoffice | 1.9.156 (including) | 1.9.156 (including) |
| Openoffice.org | Openoffice | 1.9.680 (including) | 1.9.680 (including) |
| Openoffice.org | Openoffice | 2.0 (including) | 2.0 (including) |
| Openoffice.org | Openoffice | 2.0-beta2 (including) | 2.0-beta2 (including) |
| Openoffice.org | Openoffice | 2.0.1 (including) | 2.0.1 (including) |
| Openoffice.org | Openoffice | 2.0.2 (including) | 2.0.2 (including) |
| Openoffice.org | Openoffice | 2.0.2-rc1 (including) | 2.0.2-rc1 (including) |
| Openoffice.org | Openoffice | 2.0.2-rc2 (including) | 2.0.2-rc2 (including) |
| Openoffice.org | Openoffice | 2.0.3 (including) | 2.0.3 (including) |
| Openoffice.org | Openoffice | 2.0.4 (including) | 2.0.4 (including) |
| Openoffice.org | Openoffice | 2.1 (including) | 2.1 (including) |
| Openoffice.org | Openoffice | 2.1.152 (including) | 2.1.152 (including) |
| Openoffice.org | Openoffice | 2.1.154 (including) | 2.1.154 (including) |
| Openoffice.org | Openoffice | 2.2 (including) | 2.2 (including) |
| Openoffice.org | Openoffice | 2.2.1 (including) | 2.2.1 (including) |
| Openoffice.org | Openoffice | 2.3 (including) | 2.3 (including) |
| Openoffice.org | Openoffice | 2.3.1 (including) | 2.3.1 (including) |
| Openoffice.org | Openoffice | 2.4 (including) | 2.4 (including) |
| Openoffice.org | Openoffice | 2.4.1 (including) | 2.4.1 (including) |
| Openoffice.org | Openoffice | 3.01 (including) | 3.01 (including) |
| Openoffice.org | Openoffice | 605b (including) | 605b (including) |
| Openoffice.org | Openoffice | 609 (including) | 609 (including) |
| Openoffice.org | Openoffice | 614 (including) | 614 (including) |
| Openoffice.org | Openoffice | 619 (including) | 619 (including) |
| Openoffice.org | Openoffice | 627 (including) | 627 (including) |
| Openoffice.org | Openoffice | 633 (including) | 633 (including) |
| Openoffice.org | Openoffice | 638 (including) | 638 (including) |
| Openoffice.org | Openoffice | 638c (including) | 638c (including) |
| Openoffice.org | Openoffice | 641b (including) | 641b (including) |
| Openoffice.org | Openoffice | 641d (including) | 641d (including) |
| Openoffice.org | Openoffice | 643 (including) | 643 (including) |
| Openoffice.org | Ubuntu | dapper | * |
| Openoffice.org | Ubuntu | hardy | * |
| Openoffice.org | Ubuntu | intrepid | * |
| Openoffice.org | Ubuntu | jaunty | * |
| Openoffice.org | Ubuntu | upstream | * |
| Red Hat Enterprise Linux 3 | RedHat | openoffice.org-0:1.1.2-44.2.0.EL3 | * |
| Red Hat Enterprise Linux 4 | RedHat | openoffice.org-0:1.1.5-10.6.0.7.EL4.1 | * |
| Red Hat Enterprise Linux 4 | RedHat | openoffice.org2-1:2.0.4-5.7.0.6.0.1 | * |
| Red Hat Enterprise Linux 5 | RedHat | openoffice.org-1:2.3.0-6.11.el5_4.1 | * |