PT-2008-4689 · Oracle+1 · Openoffice.Org+1

Tomas Hoger

·

Publicado

2008-08-27

·

Atualizado

2025-01-17

·

CVE-2008-3282

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: OpenOffice.org (OOo) version 2.4.1
Description: The issue is related to an integer overflow in the rtl allocateMemory function, which can be triggered by a crafted document. This can cause a denial of service, resulting in an application crash, or potentially allow the execution of arbitrary code. The problem is associated with a numeric truncation error and is specific to 64-bit platforms.
Recommendations: For OpenOffice.org (OOo) version 2.4.1, consider updating to a newer version that addresses this issue, as the current version is affected by the integer overflow vulnerability in the rtl allocateMemory function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-681

Identificadores relacionados

CVE-2008-3282
RHSA-2008:0835
RHSA-2008_0835

Produtos afetados

Openoffice.Org
Red Hat