PT-2010-1159 · Oracle+2 · Openoffice.Org+2
Nicolas Joly
·
Publicado
2010-02-12
·
Atualizado
2022-02-07
·
CVE-2009-3302
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
OpenOffice.org (OOo) versions prior to 3.2
Description
The issue is related to a boundary error flaw in the filter/ww8/ww8par2.cxx component of OpenOffice.org, specifically with the handling of the
sprmTSetBrc table property modifier in a Word document. This flaw can be exploited by remote attackers to cause a denial of service, potentially leading to an application crash, or possibly execute arbitrary code. The exploitation of this flaw may also allow an attacker to access confidential data, compromise its integrity, and disrupt service.Recommendations
For OpenOffice.org versions prior to 3.2, update to version 3.2 or later to resolve the issue.
Correção
DoS
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Openoffice
Openoffice.Org
Red Hat