CVE-2009-3301 Integer underflow in filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted...
HighCVSS 9.3
EPSS 12.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer underflow in filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted sprmTDefTable table property modifier in a Word document.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache openoffice | < 3.2.0 | 3.2.0 |
| Canonical Ubuntu Linux | = 8.04 | No fix listed |
| Canonical Ubuntu Linux | = 8.10 | No fix listed |
| Canonical Ubuntu Linux | = 9.04 | No fix listed |
| Canonical Ubuntu Linux | = 9.10 | No fix listed |
| debian linux | = 4.0 | No fix listed |
| debian linux | = 5.0 | No fix listed |
References
- SUSE-SA:2010:017 third-party-advisory vendor-advisory
- 38567 broken-link third-party-advisory
- 38568 broken-link third-party-advisory
- 38695 broken-link third-party-advisory
- 38921 broken-link third-party-advisory
- 41818 broken-link third-party-advisory
- 60799 broken-link third-party-advisory
- 1023591 broken-link third-party-advisory vdb-entry
- DSA-1995 third-party-advisory vendor-advisory
- GLSA-201408-19 third-party-advisory vendor-advisory
- MDVSA-2010:221 broken-link vendor-advisory
- www.openoffice.org vendor-advisory
- www.openoffice.org vendor-advisory
- www.oracle.com third-party-advisory
- RHSA-2010:0101 broken-link vendor-advisory
- 38218 broken-link third-party-advisory vdb-entry
- USN-903-1 third-party-advisory vendor-advisory
- TA10-287A third-party-advisory us-government-resource
- ADV-2010-0366 broken-link vdb-entry
- ADV-2010-0635 broken-link vdb-entry
- ADV-2010-2905 broken-link vdb-entry
- bugzilla.redhat.com issue-tracking third-party-advisory
- openoffice-word-sprmtdeftable-bo(56240) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:10423 signature tool-signature vdb-entry