Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer overflow.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openoffice.org | Openoffice | * | 3.1 (including) |
| Openoffice.org | Openoffice | 1.0-ru (including) | 1.0-ru (including) |
| Openoffice.org | Openoffice | 1.0.0 (including) | 1.0.0 (including) |
| Openoffice.org | Openoffice | 1.0.1 (including) | 1.0.1 (including) |
| Openoffice.org | Openoffice | 1.0.2 (including) | 1.0.2 (including) |
| Openoffice.org | Openoffice | 1.0.3.1 (including) | 1.0.3.1 (including) |
| Openoffice.org | Openoffice | 1.1 (including) | 1.1 (including) |
| Openoffice.org | Openoffice | 1.1-beta (including) | 1.1-beta (including) |
| Openoffice.org | Openoffice | 1.1-beta2 (including) | 1.1-beta2 (including) |
| Openoffice.org | Openoffice | 1.1-rc1 (including) | 1.1-rc1 (including) |
| Openoffice.org | Openoffice | 1.1-rc3 (including) | 1.1-rc3 (including) |
| Openoffice.org | Openoffice | 1.1.1 (including) | 1.1.1 (including) |
| Openoffice.org | Openoffice | 1.1.2 (including) | 1.1.2 (including) |
| Openoffice.org | Openoffice | 1.1.3 (including) | 1.1.3 (including) |
| Openoffice.org | Openoffice | 1.1.4 (including) | 1.1.4 (including) |
| Openoffice.org | Openoffice | 1.1.5 (including) | 1.1.5 (including) |
| Openoffice.org | Openoffice | 1.9.84 (including) | 1.9.84 (including) |
| Openoffice.org | Openoffice | 1.9.87 (including) | 1.9.87 (including) |
| Openoffice.org | Openoffice | 1.9.91 (including) | 1.9.91 (including) |
| Openoffice.org | Openoffice | 1.9.93 (including) | 1.9.93 (including) |
| Openoffice.org | Openoffice | 1.9.95 (including) | 1.9.95 (including) |
| Openoffice.org | Openoffice | 1.9.100 (including) | 1.9.100 (including) |
| Openoffice.org | Openoffice | 1.9.104 (including) | 1.9.104 (including) |
| Openoffice.org | Openoffice | 1.9.113 (including) | 1.9.113 (including) |
| Openoffice.org | Openoffice | 1.9.118 (including) | 1.9.118 (including) |
| Openoffice.org | Openoffice | 1.9.122 (including) | 1.9.122 (including) |
| Openoffice.org | Openoffice | 1.9.130 (including) | 1.9.130 (including) |
| Openoffice.org | Openoffice | 1.9.156 (including) | 1.9.156 (including) |
| Openoffice.org | Openoffice | 1.9.680 (including) | 1.9.680 (including) |
| Openoffice.org | Openoffice | 2.0 (including) | 2.0 (including) |
| Openoffice.org | Openoffice | 2.0-beta2 (including) | 2.0-beta2 (including) |
| Openoffice.org | Openoffice | 2.0.1 (including) | 2.0.1 (including) |
| Openoffice.org | Openoffice | 2.0.2 (including) | 2.0.2 (including) |
| Openoffice.org | Openoffice | 2.0.2-rc1 (including) | 2.0.2-rc1 (including) |
| Openoffice.org | Openoffice | 2.0.2-rc2 (including) | 2.0.2-rc2 (including) |
| Openoffice.org | Openoffice | 2.0.3 (including) | 2.0.3 (including) |
| Openoffice.org | Openoffice | 2.0.4 (including) | 2.0.4 (including) |
| Openoffice.org | Openoffice | 2.1 (including) | 2.1 (including) |
| Openoffice.org | Openoffice | 2.1.152 (including) | 2.1.152 (including) |
| Openoffice.org | Openoffice | 2.1.154 (including) | 2.1.154 (including) |
| Openoffice.org | Openoffice | 2.2 (including) | 2.2 (including) |
| Openoffice.org | Openoffice | 2.2.1 (including) | 2.2.1 (including) |
| Openoffice.org | Openoffice | 2.3 (including) | 2.3 (including) |
| Openoffice.org | Openoffice | 2.3.1 (including) | 2.3.1 (including) |
| Openoffice.org | Openoffice | 2.4 (including) | 2.4 (including) |
| Openoffice.org | Openoffice | 2.4.1 (including) | 2.4.1 (including) |
| Openoffice.org | Openoffice | 3.01 (including) | 3.01 (including) |
| Openoffice.org | Openoffice | 605b (including) | 605b (including) |
| Openoffice.org | Openoffice | 609 (including) | 609 (including) |
| Openoffice.org | Openoffice | 614 (including) | 614 (including) |
| Openoffice.org | Openoffice | 619 (including) | 619 (including) |
| Openoffice.org | Openoffice | 627 (including) | 627 (including) |
| Openoffice.org | Openoffice | 633 (including) | 633 (including) |
| Openoffice.org | Openoffice | 638 (including) | 638 (including) |
| Openoffice.org | Openoffice | 638c (including) | 638c (including) |
| Openoffice.org | Openoffice | 641b (including) | 641b (including) |
| Openoffice.org | Openoffice | 641d (including) | 641d (including) |
| Openoffice.org | Openoffice | 643 (including) | 643 (including) |