OpenOffice.org 3 for Windows ships with a vulnerable version of the MSVC Runtime, CVE-2009-2493 for details. OpenOffice.org is not affected by the security issue, but centrally installs the vulnerable MSVC Runtime if it didn't exist on the system before. The vulnerable version should be updated automatically by the monthly Windows updates, but newer versions of OpenOffice.org also come with the updated MSVC Runtime.
Note: OpenOffice.org 2 and OpenOffice.org 1.1 are not impacted by this issue.
There are no predictable symptoms that would indicate this issue has occurred.
None.
This issue is addressed in the following release: OpenOffice.org 3.2