CVE-2008-2152 Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in OpenOffice.org (OOo) 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that t...
HighCVSS 9.3
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in OpenOffice.org (OOo) 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openoffice.org | = 2.0 | No fix listed |
| openoffice.org | = 2.1 | No fix listed |
| openoffice.org | = 2.2 | No fix listed |
| openoffice.org | = 2.3 | No fix listed |
| openoffice.org | = 2.4 | No fix listed |
References
- 20080610 Multiple Vendor OpenOffice rtl_allocateMemory() Integer Overflow Vulnerability third-party-advisory
- 30599 third-party-advisory vendor-advisory
- 30633 third-party-advisory
- 30634 third-party-advisory
- 30635 third-party-advisory
- 31029 third-party-advisory
- GLSA-200807-05 vendor-advisory
- 237944 vendor-advisory
- MDVSA-2008:137 vendor-advisory
- MDVSA-2008:138 vendor-advisory
- www.openoffice.org
- RHSA-2008:0537 vendor-advisory
- RHSA-2008:0538 vendor-advisory
- 29622 vdb-entry
- 1020219 vdb-entry
- ADV-2008-1773 vdb-entry
- ADV-2008-1804 vdb-entry
- openoffice-rtlallocatememory-bo(42957) vdb-entry
- oval:org.mitre.oval:def:9787 signature vdb-entry
- FEDORA-2008-5143 vendor-advisory
- FEDORA-2008-5239 vendor-advisory
- FEDORA-2008-5247 vendor-advisory