CVE-2000-0291
CVE-2000-0291 is a medium-severity vulnerability in Sun Staroffice with a CVSS 2.0 base score of 4.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 4.6)
- EPSS exploit prediction: 0% (36th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Sun Staroffice
- Published:
- Last modified:
Description
Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document.
Frequently asked questions
- What is CVE-2000-0291?
- Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document.
- How severe is CVE-2000-0291?
- CVE-2000-0291 has a CVSS 2.0 base score of 4.6, rated medium severity.
- Is CVE-2000-0291 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (36th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2000-0291?
- CVE-2000-0291 affects Sun Staroffice. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2000-0291?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2000-0291 published?
- CVE-2000-0291 was published on 2000-04-16 and last updated on 2026-06-16.
References
- http://archives.neohapsis.com/archives/bugtraq/2000-04/0077.html
- http://www.securityfocus.com/bid/1112
Affected products (1)
- cpe:2.3:a:sun:staroffice:5.1:*:*:*:*:*:*:*
More vulnerabilities in Sun Staroffice
- CVE-2000-0175 — Critical (CVSS 10.0): Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET…
- CVE-2007-2834 — Critical (CVSS 9.3): Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite…
- CVE-2006-5870 — Critical (CVSS 9.3): Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and…
- CVE-2006-2198 — High (CVSS 7.6): OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct…
- CVE-2006-2199 — High (CVSS 7.6): Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3…
- CVE-2006-3117 — High (CVSS 7.6): Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows…