CVE-2009-0201 Heap-based buffer overflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via unspecified records in a crafted Word do...
HighCVSS 9.3
EPSS 6.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via unspecified records in a crafted Word document, related to "table parsing."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openoffice.org | <= 3.1 | No fix listed |
| openoffice.org | = 1.1.2 | No fix listed |
| openoffice.org | = 1.1.3 | No fix listed |
| openoffice.org | = 1.1.4 | No fix listed |
| openoffice.org | = 1.1.5 | No fix listed |
| openoffice.org | = 2.0 | No fix listed |
| openoffice.org | = 2.0.2 | No fix listed |
| openoffice.org | = 2.0.3 | No fix listed |
| openoffice.org | = 2.0.4 | No fix listed |
| openoffice.org | = 2.1 | No fix listed |
| openoffice.org | = 2.2 | No fix listed |
| openoffice.org | = 2.2.1 | No fix listed |
| openoffice.org | = 2.3 | No fix listed |
| openoffice.org | = 2.3.1 | No fix listed |
| openoffice.org | = 2.4 | No fix listed |
| openoffice.org | = 2.4.1 | No fix listed |
References
- development.openoffice.org
- SUSE-SR:2009:015 vendor-advisory
- 35036 third-party-advisory vendor-advisory
- 36750 third-party-advisory
- 60799 third-party-advisory
- secunia.com vendor-advisory
- 263508 vendor-advisory
- 1020715 vendor-advisory
- DSA-1880 vendor-advisory
- GLSA-201408-19 vendor-advisory
- MDVSA-2010:035 vendor-advisory
- MDVSA-2010:091 vendor-advisory
- MDVSA-2010:105 vendor-advisory
- www.openoffice.org
- 20090901 Secunia Research: OpenOffice.org Word Document Table Parsing Buffer Overflow mailing-list
- 36200 vdb-entry
- 1022798 vdb-entry
- ADV-2009-2490 vdb-entry vendor-advisory
- oval:org.mitre.oval:def:10726 signature vdb-entry