Every CVE Search/ Get API key

CVE-2005-0941

The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates...

5.1 MediumFix available

The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow.

Exploit likelihood

4.13%Down 1.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.1

The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow.

Record
CVE-2005-0941
CVSS 2.0
5.1 MediumAV:N/AC:H/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow.

Record
CVE-2005-0941
Updated
2026-11-02
EUVDEUVD-2005-0942 No score

The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow.

Record
EUVD-2005-0942
Updated
2026-11-03
GitHub AdvisoriesGHSA-r5f5-87f9-q46c No score

The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates...

The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow.

Record
GHSA-r5f5-87f9-q46c
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openoffice.org
Red Hat:enterprise_linux:3::as
 before 0:1.1.2-24.2.0.EL3
0:1.1.2-24.2.0.EL3
openoffice.org-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:1.1.2-24.2.0.EL3
0:1.1.2-24.2.0.EL3
openoffice.org-i18n
Red Hat:enterprise_linux:3::as
 before 0:1.1.2-24.2.0.EL3
0:1.1.2-24.2.0.EL3
openoffice.org-libs
Red Hat:enterprise_linux:3::as
 before 0:1.1.2-24.2.0.EL3
0:1.1.2-24.2.0.EL3
openoffice.org
Red Hat:enterprise_linux:3::desktop
 before 0:1.1.2-24.2.0.EL3
0:1.1.2-24.2.0.EL3
openoffice.org-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:1.1.2-24.2.0.EL3
0:1.1.2-24.2.0.EL3
openoffice.org-i18n
Red Hat:enterprise_linux:3::desktop
 before 0:1.1.2-24.2.0.EL3
0:1.1.2-24.2.0.EL3
openoffice.org-libs
Red Hat:enterprise_linux:3::desktop
 before 0:1.1.2-24.2.0.EL3
0:1.1.2-24.2.0.EL3
openoffice.org
Red Hat:enterprise_linux:3::es
 before 0:1.1.2-24.2.0.EL3
0:1.1.2-24.2.0.EL3
openoffice.org-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:1.1.2-24.2.0.EL3
0:1.1.2-24.2.0.EL3
Show 26 moreShow less
Affected packages
PackageAffectedFixed
openoffice.org-i18n
Red Hat:enterprise_linux:3::es
 before 0:1.1.2-24.2.0.EL3
0:1.1.2-24.2.0.EL3
openoffice.org-libs
Red Hat:enterprise_linux:3::es
 before 0:1.1.2-24.2.0.EL3
0:1.1.2-24.2.0.EL3
openoffice.org
Red Hat:enterprise_linux:3::ws
 before 0:1.1.2-24.2.0.EL3
0:1.1.2-24.2.0.EL3
openoffice.org-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:1.1.2-24.2.0.EL3
0:1.1.2-24.2.0.EL3
openoffice.org-i18n
Red Hat:enterprise_linux:3::ws
 before 0:1.1.2-24.2.0.EL3
0:1.1.2-24.2.0.EL3
openoffice.org-libs
Red Hat:enterprise_linux:3::ws
 before 0:1.1.2-24.2.0.EL3
0:1.1.2-24.2.0.EL3
openoffice.org
Red Hat:enterprise_linux:4::as
 before 0:1.1.2-24.6.0.EL4
0:1.1.2-24.6.0.EL4
openoffice.org-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:1.1.2-24.6.0.EL4
0:1.1.2-24.6.0.EL4
openoffice.org-i18n
Red Hat:enterprise_linux:4::as
 before 0:1.1.2-24.6.0.EL4
0:1.1.2-24.6.0.EL4
openoffice.org-kde
Red Hat:enterprise_linux:4::as
 before 0:1.1.2-24.6.0.EL4
0:1.1.2-24.6.0.EL4
openoffice.org-libs
Red Hat:enterprise_linux:4::as
 before 0:1.1.2-24.6.0.EL4
0:1.1.2-24.6.0.EL4
openoffice.org
Red Hat:enterprise_linux:4::desktop
 before 0:1.1.2-24.6.0.EL4
0:1.1.2-24.6.0.EL4
openoffice.org-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:1.1.2-24.6.0.EL4
0:1.1.2-24.6.0.EL4
openoffice.org-i18n
Red Hat:enterprise_linux:4::desktop
 before 0:1.1.2-24.6.0.EL4
0:1.1.2-24.6.0.EL4
openoffice.org-kde
Red Hat:enterprise_linux:4::desktop
 before 0:1.1.2-24.6.0.EL4
0:1.1.2-24.6.0.EL4
openoffice.org-libs
Red Hat:enterprise_linux:4::desktop
 before 0:1.1.2-24.6.0.EL4
0:1.1.2-24.6.0.EL4
openoffice.org
Red Hat:enterprise_linux:4::es
 before 0:1.1.2-24.6.0.EL4
0:1.1.2-24.6.0.EL4
openoffice.org-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:1.1.2-24.6.0.EL4
0:1.1.2-24.6.0.EL4
openoffice.org-i18n
Red Hat:enterprise_linux:4::es
 before 0:1.1.2-24.6.0.EL4
0:1.1.2-24.6.0.EL4
openoffice.org-kde
Red Hat:enterprise_linux:4::es
 before 0:1.1.2-24.6.0.EL4
0:1.1.2-24.6.0.EL4
openoffice.org-libs
Red Hat:enterprise_linux:4::es
 before 0:1.1.2-24.6.0.EL4
0:1.1.2-24.6.0.EL4
openoffice.org
Red Hat:enterprise_linux:4::ws
 before 0:1.1.2-24.6.0.EL4
0:1.1.2-24.6.0.EL4
openoffice.org-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:1.1.2-24.6.0.EL4
0:1.1.2-24.6.0.EL4
openoffice.org-i18n
Red Hat:enterprise_linux:4::ws
 before 0:1.1.2-24.6.0.EL4
0:1.1.2-24.6.0.EL4
openoffice.org-kde
Red Hat:enterprise_linux:4::ws
 before 0:1.1.2-24.6.0.EL4
0:1.1.2-24.6.0.EL4
openoffice.org-libs
Red Hat:enterprise_linux:4::ws
 before 0:1.1.2-24.6.0.EL4
0:1.1.2-24.6.0.EL4

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-0941 is a medium vulnerability (CVSS 5.1) in Openoffice, published April 12, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.13%, the 90th percentile. Fixed in openoffice.org 0:1.1.2-24.2.0.EL3.

References

Show 11 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open