PT-2008-1154 · Apache+1 · Openoffice.Org+1

Publicado

2008-10-30

·

Atualizado

2017-09-29

·

CVE-2008-2237

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions OpenOffice.org versions prior to 2.4.2
Description The issue is related to a heap-based buffer overflow that can be triggered by a crafted WMF file associated with a StarOffice/StarSuite document. This can allow remote attackers to execute arbitrary code. The vulnerability is also described as allowing an attacker to access confidential data, compromise its integrity, and cause a denial of service.
Recommendations For versions prior to 2.4.2, update to version 2.4.2 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted WMF files associated with StarOffice/StarSuite documents until the update is applied.

Correção

RCE

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2020-02827
CVE-2008-2237
DSA-1661-1
RHSA-2008:0939
RHSA-2008_0939

Produtos afetados

Openoffice.Org
Red Hat