Multiple heap-based buffer overflows in OpenOffice.org before 2.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted (1) Attribute and (2) Font Description records.
| Software | From | Fixed in |
|---|---|---|
| openoffice / openoffice | - | 2.3.1.x |