PT-2008-1156 · Apache+1 · Openoffice+1

Published 2008-04-17 · Updated 2017-09-29 · CVE-2008-0320

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenOffice versions prior to 2.4

Description The issue is related to a heap-based buffer overflow in the OLE importer, which can be exploited by remote attackers. This can lead to a denial of service, potentially allowing the execution of arbitrary code via a crafted OLE file. The exploitation may result in unauthorized access to confidential data, disruption of data integrity, and service disruption.

Recommendations For versions prior to 2.4, update to version 2.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of OLE files or disabling the OLE importer until a patch is applied. Avoid using crafted OLE files that may trigger the buffer overflow.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2020-02842

CVE-2008-0320

DSA-1547-1

RHSA-2008:0175

RHSA-2008:0176

RHSA-2008_0175

RHSA-2008_0176

Affected Products

Openoffice

Red Hat

References · 46

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/openoffice_ole.rb · Exploit
• 🔥 https://exploit-db.com/exploits/18923 · Exploit
• http://ubuntu.com/usn/usn-609-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02844 · Security Note
• http://secunia.com/advisories/29987 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2008:095 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2008-0320 · Vendor Advisory
• http://secunia.com/advisories/29910 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-April/msg00448.html · Vendor Advisory
• http://secunia.com/advisories/30179 · Vendor Advisory
• http://vupen.com/english/advisories/2008/1375/references · Vendor Advisory
• http://secunia.com/advisories/30100 · Vendor Advisory
• http://secunia.com/advisories/29913 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-231642-1 · Vendor Advisory
• http://secunia.com/advisories/29864 · Vendor Advisory