critical9.3
CVE-2008-2238
Multiple integer overflows in OpenOffice.org (OOo) 2.x before 2.4.2 allow remote attackers to execute arbitrary code via crafted EMR records in an EMF file ass…
Impact
Multiple integer overflows in OpenOffice.org (OOo) 2.x before 2.4.2 allow remote attackers to execute arbitrary code via crafted EMR records in an EMF file associated with a StarOffice/StarSuite document, which trigger a heap-based buffer overflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openoffice | Openoffice.Org | All versions through 2.4.1 Versions 2.0, 2.0.2, 2.0.3, 2.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=750
- http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html
- http://neowiki.neooffice.org/index.php/NeoOffice_2.2.5_Patch_3_New_Features#Security_fixes
- http://secunia.com/advisories/32419
- http://secunia.com/advisories/32461
- http://secunia.com/advisories/32463
- http://secunia.com/advisories/32489
- http://secunia.com/advisories/32676
- http://secunia.com/advisories/32856
- http://secunia.com/advisories/32872
- http://secunia.com/advisories/33140
- http://security.gentoo.org/glsa/glsa-200812-13.xml
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-243226-1
- http://www.debian.org/security/2008/dsa-1661
- http://www.openoffice.org/security/cves/CVE-2008-2238.html
- http://www.redhat.com/support/errata/RHSA-2008-0939.html
- http://www.securityfocus.com/bid/31962
- http://www.securitytracker.com/id?1021121
- http://www.ubuntu.com/usn/usn-677-1
- http://www.ubuntu.com/usn/usn-677-2
- http://www.vupen.com/english/advisories/2008/2947
- http://www.vupen.com/english/advisories/2008/3103
- http://www.vupen.com/english/advisories/2008/3153
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46166
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10849