PT-2008-3663 · Apache+1 · Openoffice.Org+1

Sean Larsson · Published 2008-06-10 · Updated 2025-01-17 · CVE-2008-2152

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenOffice.org versions 2.0 through 2.4

Description The issue is related to an integer overflow in the rtl allocateMemory function, which can lead to a heap-based buffer overflow. This can be triggered by a crafted file, potentially allowing remote attackers to execute arbitrary code.

Recommendations For OpenOffice.org versions 2.0 through 2.4, update to a version that contains a fix for this issue.

Fix

RCE

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2008-2152

RHSA-2008:0537

RHSA-2008:0538

RHSA-2008_0537

RHSA-2008_0538

Affected Products

Openoffice.Org

Red Hat

References · 29

• http://mandriva.com/security/advisories?name=MDVSA-2008:138 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0537.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-June/msg00499.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0538.html · Vendor Advisory
• http://secunia.com/advisories/30599 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200807-05.xml · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-June/msg00385.html · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-237944-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-2152 · Security Note
• https://redhat.com/archives/fedora-package-announce/2008-June/msg00473.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2008:137 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9787 · Note
• http://secunia.com/advisories/30635 · Note
• http://securityfocus.com/bid/29622 · Note
• http://secunia.com/advisories/31029 · Note