NetSight
IP …
critical9.3Public exploit code

CVE-2008-0320

Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute a…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream.

Affected products

VendorProductAffected versions
OpenofficeOpenoffice.Org
through 2.3.1
Versions 2.0.3, 2.1, 2.2, 2.2.1, 2.3

Weakness classification

CWE-119

References