Sun Staroffice vulnerabilities
9 vulnerabilities
Known vulnerabilities in Sun Staroffice, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2007-2834apacheopenoffice+142
EPSS score11.97%
Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.CVE-2000-1156sunstarofficeEPSS score0.45%
StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read files of the user who is using StarOffice.CVE-2000-0291sunstarofficeEPSS score0.45%
Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document.CVE-2000-0174sunstarofficeEPSS score5.92%
StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-0175sunstarofficeEPSS score2.40%
Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command.CVE-2006-2198openofficeopenoffice+1EPSS score3.47%
OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious BASIC macro, which is executed without prompting the user.CVE-2006-2199openofficeopenoffice+1EPSS score3.47%
Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents.CVE-2006-5870debianopenoffice.org+7EPSS score8.51%
Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to execute arbitrary code via a crafted (a) WMF or (b) EMF file that triggers heap-based buffer overflows in (1) wmf/winwmf.cxx, during processing of META_ESCAPE records; and wmf/enhwmf.cxx, during processing of (2) EMR_POLYPOLYGON and (3) EMR_POLYPOLYGON16 records.CVE-2006-3117openofficeopenoffice+1EPSS score4.32%
Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."