Approved changes feed: RSS · Atom

cpe:2.3:a:sun:openoffice.org:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductOpenoffice.Org (ed0db03e-016f-5564-b372-d913ea0ccda3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:apache/openoffice purl2cpe 2026-06-01 10:10:57.433769
pkg:github/apache/openoffice purl2cpe 2026-06-01 10:10:57.433770

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2416 vulnerable 2026-06-08 04:51:28.368873 Details available
Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service (application crash) via crafted (1) Notation or (2) Enumeration attribute types in an XML file, as demonstrated by the Codenomicon XML fuzzing framework.
Published: 2009-08-11T18:00:00.000Z
Updated: 2025-01-21T15:30:42.200Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5747 vulnerable 2026-06-08 04:50:06.982211 Details available
Integer underflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted values that trigger an excessive loop and a stack-based buffer overflow.
Published: 2008-04-17T17:00:00.000Z
Updated: 2024-08-07T15:39:13.714Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.