CVE-2009-0200 Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word d...
HighCVSS 9.3
EPSS 6.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openoffice.org | <= 3.1 | No fix listed |
| openoffice.org | = 1.0-ru | No fix listed |
| openoffice.org | = 1.0.0 | No fix listed |
| openoffice.org | = 1.0.1 | No fix listed |
| openoffice.org | = 1.0.2 | No fix listed |
| openoffice.org | = 1.0.3.1 | No fix listed |
| openoffice.org | = 1.1 | No fix listed |
| openoffice.org | = 1.1-beta | No fix listed |
| openoffice.org | = 1.1-beta2 | No fix listed |
| openoffice.org | = 1.1-rc1 | No fix listed |
| openoffice.org | = 1.1-rc3 | No fix listed |
| openoffice.org | = 1.1.1 | No fix listed |
| openoffice.org | = 1.1.2 | No fix listed |
| openoffice.org | = 1.1.3 | No fix listed |
| openoffice.org | = 1.1.4 | No fix listed |
| openoffice.org | = 1.1.5 | No fix listed |
| openoffice.org | = 1.9.84 | No fix listed |
| openoffice.org | = 1.9.87 | No fix listed |
| openoffice.org | = 1.9.91 | No fix listed |
| openoffice.org | = 1.9.93 | No fix listed |
| openoffice.org | = 1.9.95 | No fix listed |
| openoffice.org | = 1.9.100 | No fix listed |
| openoffice.org | = 1.9.104 | No fix listed |
| openoffice.org | = 1.9.113 | No fix listed |
| openoffice.org | = 1.9.118 | No fix listed |
Show 33 more
| Product | Affected versions | Fixed in |
|---|---|---|
| openoffice.org | = 1.9.122 | No fix listed |
| openoffice.org | = 1.9.130 | No fix listed |
| openoffice.org | = 1.9.156 | No fix listed |
| openoffice.org | = 1.9.680 | No fix listed |
| openoffice.org | = 2.0 | No fix listed |
| openoffice.org | = 2.0-beta2 | No fix listed |
| openoffice.org | = 2.0.1 | No fix listed |
| openoffice.org | = 2.0.2 | No fix listed |
| openoffice.org | = 2.0.2-rc1 | No fix listed |
| openoffice.org | = 2.0.2-rc2 | No fix listed |
| openoffice.org | = 2.0.3 | No fix listed |
| openoffice.org | = 2.0.4 | No fix listed |
| openoffice.org | = 2.1 | No fix listed |
| openoffice.org | = 2.1.152 | No fix listed |
| openoffice.org | = 2.1.154 | No fix listed |
| openoffice.org | = 2.2 | No fix listed |
| openoffice.org | = 2.2.1 | No fix listed |
| openoffice.org | = 2.3 | No fix listed |
| openoffice.org | = 2.3.1 | No fix listed |
| openoffice.org | = 2.4 | No fix listed |
| openoffice.org | = 2.4.1 | No fix listed |
| openoffice.org | = 3.01 | No fix listed |
| openoffice.org | = 605b | No fix listed |
| openoffice.org | = 609 | No fix listed |
| openoffice.org | = 614 | No fix listed |
| openoffice.org | = 619 | No fix listed |
| openoffice.org | = 627 | No fix listed |
| openoffice.org | = 633 | No fix listed |
| openoffice.org | = 638 | No fix listed |
| openoffice.org | = 638c | No fix listed |
| openoffice.org | = 641b | No fix listed |
| openoffice.org | = 641d | No fix listed |
| openoffice.org | = 643 | No fix listed |
References
- development.openoffice.org
- SUSE-SR:2009:015 vendor-advisory
- 35036 third-party-advisory vendor-advisory
- 36750 third-party-advisory
- 60799 third-party-advisory
- secunia.com vendor-advisory
- 263508 vendor-advisory
- 1020715 vendor-advisory
- DSA-1880 vendor-advisory
- GLSA-201408-19 vendor-advisory
- MDVSA-2010:035 vendor-advisory
- MDVSA-2010:091 vendor-advisory
- MDVSA-2010:105 vendor-advisory
- www.openoffice.org
- 20090901 Secunia Research: OpenOffice.org Word Document Table Parsing Integer Underflow mailing-list
- 36200 vdb-entry
- ADV-2009-2490 vdb-entry vendor-advisory
- oval:org.mitre.oval:def:10881 signature vdb-entry