Vulnerabilities > Openoffice > Openoffice > 2.0.2

DATE CVE VULNERABILITY TITLE RISK
2007-12-06 CVE-2007-4575 Code Injection vulnerability in Openoffice
HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via crafted database documents, related to "exposing static java methods."
network
openoffice CWE-94
critical
9.3
2006-06-30 CVE-2006-3117 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."
network
high complexity
openoffice sun CWE-119
7.6
2006-06-30 CVE-2006-2199 Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents.
network
high complexity
openoffice sun
7.6
2006-06-30 CVE-2006-2198 Permissions, Privileges, and Access Controls vulnerability in multiple products
OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious BASIC macro, which is executed without prompting the user.
network
high complexity
openoffice sun CWE-264
7.6