Skip to content
OpenAdvisories
Unscored DSA-1995-1 6 CVEs

openoffice.org - several

Published Feb 12, 2010 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 4.0 openoffice.org 2.0.4.dfsg.2-7etch9
Debian · 5.0 openoffice.org 1:2.4.1+dfsg-1+lenny6

Vulnerabilities 6

  • Medium —
    CVE-2009-0217

    Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation

    The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server…

    mono org.apache.santuario:xmlsec xml-security-c xmlsec1 Debian Maven
  • Unscored —
    CVE-2009-2949 EPSS 14%

    Integer overflow in the XPMReader::ReadXPM function in filter.vcl/ixpm/svt_xpmread.cxx in OpenOffice.org (OOo) before 3…

  • Unscored —
    CVE-2009-2950 EPSS 14%

    Heap-based buffer overflow in the GIFLZWDecompressor::GIFLZWDecompressor function in filter.vcl/lgif/decode.cxx in Open…

  • Unscored —
    CVE-2009-3301 EPSS 12%

    Integer underflow in filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denia…

  • Unscored —
    CVE-2009-3302 EPSS 12%

    filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (applica…

  • Unscored —
    CVE-2010-0136

    OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro securi…