GCVE - cpe:2.3:a:openoffice:openoffice:1.0.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openoffice:openoffice:1.0.1:*:*:*:*:*:*:*

part: a version: 1.0.1 update: *

Vendor	Openoffice (`ee89f3d6-6589-528b-ba21-bf80fa72ea68`)
Product	Openoffice (`9063bdfb-c235-5a62-b167-7f05010990c5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:apache/openoffice`	purl2cpe	2026-06-01 10:11:35.322897
`pkg:github/apache/openoffice`	purl2cpe	2026-06-01 10:11:35.322899
`pkg:sourceforge/openofficeorg.mirror`	purl2cpe	2026-06-01 10:11:35.322900

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-4636`	vulnerable	2026-06-08 04:48:44.588118	Details available OpenOffice.org 2.0 and earlier, when hyperlinks has been disabled, does not prevent the user from clicking the WWW-browser button in the Hyperlink dialog, which makes it easier for attackers to trick the user into bypassing intended security settings. Published: 2006-01-09T23:00:00.000Z Updated: 2024-08-07T23:53:28.500Z Open on db.gcve.eu Reference links http://qa.openoffice.org/issues/show_bug.cgi?id=53491 http://securitytracker.com/id?1015419 http://www.mandriva.com/security/advisories?name=MDKSA-2006:033	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0941`	vulnerable	2026-06-08 04:48:13.987588	Details available The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow. Published: 2005-04-12T04:00:00.000Z Updated: 2024-08-07T21:28:28.998Z Open on db.gcve.eu Reference links http://www.redhat.com/support/errata/RHSA-2005-375.html http://www.securityfocus.com/bid/13092 http://www.novell.com/linux/security/advisories/2005_21_sr.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9106 http://www.gentoo.org/security/en/glsa/glsa-200504-13.xml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2210`	vulnerable	2026-06-08 04:47:19.392215	Details available The installation of OpenOffice 1.0.1 allows local users to overwrite files and possibly gain privileges via a symlink attack on the USERNAME_autoresponse.conf temporary file. Published: 2006-04-04T19:00:00.000Z Updated: 2024-09-16T22:55:26.574Z Open on db.gcve.eu Reference links http://www.iss.net/security_center/static/10346.php http://www.securityfocus.com/bid/5950 http://archives.neohapsis.com/archives/bugtraq/2002-10/0161.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.