Integer underflow in filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted sprmTDefTable table property modifier in a Word document.
Vector
NETWORK
Complexity
MEDIUM
Authentication
NONE
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE
Sun Openoffice.org 2.0.3 (not an official CPE)
Sun Openoffice.org 2.2.1 (not an official CPE)
Sun Openoffice.org 2.3.1 (not an official CPE)
Sun Microsystems OpenOffice.org 2.3.0
Sun Microsystems OpenOffice.org 2.4.0
Sun Microsystems OpenOffice.org 2.4.1
Sun Microsystems OpenOffice.org 3.0.1
Sun Microsystems OpenOffice.org 3.1.0
Sun Microsystems OpenOffice.org 3.1.1
Sun Microsystems OpenOffice.org 2.0.0
Sun Microsystems OpenOffice.org 3.0.0
Sun Microsystems OpenOffice.org 2.1.0
Sun Microsystems OpenOffice.org 2.4.2
Sun Microsystems OpenOffice.org 1.1.0
Sun Openoffice.org 2.4.3 (not an official CPE)
Sun Microsystems OpenOffice.org 2.2.0