Approved changes feed: RSS · Atom

cpe:2.3:a:openoffice:openoffice:1.0.2:*:*:*:*:*:*:*

part: a version: 1.0.2 update: *

VendorOpenoffice (ee89f3d6-6589-528b-ba21-bf80fa72ea68)
ProductOpenoffice (9063bdfb-c235-5a62-b167-7f05010990c5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:apache/openoffice purl2cpe 2026-06-01 10:11:35.324145
pkg:github/apache/openoffice purl2cpe 2026-06-01 10:11:35.324147
pkg:sourceforge/openofficeorg.mirror purl2cpe 2026-06-01 10:11:35.324148

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-4636 vulnerable 2026-06-08 04:48:44.588883 Details available
OpenOffice.org 2.0 and earlier, when hyperlinks has been disabled, does not prevent the user from clicking the WWW-browser button in the Hyperlink dialog, which makes it easier for attackers to trick the user into bypassing intended security settings.
Published: 2006-01-09T23:00:00.000Z
Updated: 2024-08-07T23:53:28.500Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0941 vulnerable 2026-06-08 04:48:13.988122 Details available
The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow.
Published: 2005-04-12T04:00:00.000Z
Updated: 2024-08-07T21:28:28.998Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.