CVE-2007-0245: Heap-based buffer overflow in OpenOffice.org (OOo) 2.2.1 and earlier allows remote attackers to execute arb...

Security readout for executives and security teams

CVE-2007-0245 is an old OpenOffice.org flaw where a malicious RTF document can corrupt memory and potentially run attacker-controlled code. Business risk depends on whether legacy OpenOffice.org 2.2.1 or earlier is still present, including document conversion services that process uploaded files. Likely exposure is limited to legacy environments running OpenOffice.org 2.2.1 or earlier, or applications embedding those builds for RTF parsing or conversion. The provided affected-product metadata is incomplete, so confirm by inventory rather than relying only on CPE data. Prioritize remediation where legacy OpenOffice.org processes external documents, email attachments, or uploaded RTF files. If no such legacy software exists, this is mainly an asset hygiene finding rather than an urgent incident response item. Mitigation focus: Identify and remove OpenOffice.org 2.2.1 and earlier installations.; Apply vendor-provided OpenOffice.org security updates from applicable distribution advisories.; Check vendor guidance where the fixed package version is unclear..

Prepared

Jun 29, 2026, 05:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.