CVE catalog

CVE-2009-0200

openoffice.org - arbitrary code execution

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
6.72% · Oct 25, 2026

Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer overflow. OpenOffice.org Word document Integer Underflow The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianopenoffice.org5.01:2.4.1+dfsg-1vulnerable
Debianopenoffice.org5.01:2.4.1+dfsg-1+lenny1vulnerable
Debianopenoffice.org5.01:2.4.1-17vulnerable
Debianopenoffice.org5.01:2.4.1+dfsg-1+lenny3fixed
Debianopenoffice.org4.02.0.4.dfsg.2-5etch1vulnerable
Debianopenoffice.org4.02.0.4.dfsg.2-5etch2vulnerable
Debianopenoffice.org4.02.0.4.dfsg.2-6vulnerable
Debianopenoffice.org4.02.0.4.dfsg.2-7vulnerable
Debianopenoffice.org4.02.0.4.dfsg.2-7etch1vulnerable
Debianopenoffice.org4.02.0.4.dfsg.2-7etch2vulnerable
Debianopenoffice.org4.02.0.4.dfsg.2-7etch4vulnerable
Debianopenoffice.org4.02.0.4.dfsg.2-7etch5vulnerable
Debianopenoffice.org4.02.0.4.dfsg.2-7etch6vulnerable
Debianopenoffice.org4.02.0.4.dfsg.2-7etch7fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianopenoffice.orgdeb5.01:2.4.1+dfsg-1+lenny3Not reportedDSA-1880-1Not reported
Debianopenoffice.orgdeb4.02.0.4.dfsg.2-7etch7Not reportedDSA-1880-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References