When OpenOffice reads an ODF document, it first loads and processes an XML stream within the file called the manifest. Apache OpenOffice 3.4.0 has logic errors that allows a carefully crafted manifest to cause reads and writes beyond allocated buffers.
493c97b0d9779ff425aec7f71289318f69ad4df12dd5f0dbdc14075fa27d8e32