Cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*

A heap buffer overflow in the Draw component of Apache OpenOffice 4.1.16 and earlier can be triggered by a crafted DXF document, potentially causing a crash or memory corruption.

Apache OpenOffice versions through 4.1.16 contain a local file inclusion vulnerability in the flat file database driver that allows arbitrary file reads via crafted documents.