CVE-2008-0320 Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an OLE file with a craf...
HighCVSS 9.3
EPSS 56.9%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openoffice.org | <= 2.3.1 | No fix listed |
| openoffice.org | = 2.0.3 | No fix listed |
| openoffice.org | = 2.1 | No fix listed |
| openoffice.org | = 2.2 | No fix listed |
| openoffice.org | = 2.2.1 | No fix listed |
| openoffice.org | = 2.3 | No fix listed |
References
- 20080417 Multiple Vendor OpenOffice OLE DocumentSummaryInformation Heap Overflow Vulnerability third-party-advisory
- 29844 third-party-advisory vendor-advisory
- 29852 third-party-advisory vendor-advisory
- 29864 third-party-advisory vendor-advisory
- 29871 third-party-advisory vendor-advisory
- 29910 third-party-advisory vendor-advisory
- 29913 third-party-advisory vendor-advisory
- 29987 third-party-advisory vendor-advisory
- 30100 third-party-advisory vendor-advisory
- 30179 third-party-advisory vendor-advisory
- GLSA-200805-16 vendor-advisory
- 231642 vendor-advisory
- DSA-1547 vendor-advisory
- MDVSA-2008:090 vendor-advisory
- MDVSA-2008:095 vendor-advisory
- SUSE-SA:2008:023 vendor-advisory
- www.openoffice.org
- www.openoffice.org
- www.openoffice.org
- www.openoffice.org
- RHSA-2008:0175 vendor-advisory
- RHSA-2008:0176 vendor-advisory
- 28819 vdb-entry
- 1019890 vdb-entry
- USN-609-1 vendor-advisory
- ADV-2008-1253 vdb-entry vendor-advisory
- ADV-2008-1375 vdb-entry vendor-advisory
- openoffice-ole-bo(41860) vdb-entry
- oval:org.mitre.oval:def:10318 signature vdb-entry
- FEDORA-2008-3251 vendor-advisory