PT-2008-3663

CVE-2008-2152

Publicado

2008-06-10

Atualizado

2025-01-17

Descrição por

CVSS 2.0

9.3

Alta

MétricasAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenOffice.org versions 2.0 through 2.4

Description The issue is related to an integer overflow in the rtl allocateMemory function, which can lead to a heap-based buffer overflow. This can be triggered by a crafted file, potentially allowing remote attackers to execute arbitrary code.

Recommendations For OpenOffice.org versions 2.0 through 2.4, update to a version that contains a fix for this issue.

Explorabilidade

Correção

Impactos

Pesquisadores

Sean Larsson

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-189

Identificadores relacionados

CVE-2008-2152