Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document, related to a "numeric truncation error," a different vulnerability than CVE-2008-2152.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade openoffice.org-javafilterUpgrade openoffice.org-langpack-ja_JPUpgrade openoffice.org-langpack-esUpgrade openoffice.org-langpack-nb_NOUpgrade openoffice.org-langpack-pl_PLUpgrade openoffice.org-headlessUpgrade openoffice.org-langpack-arUpgrade openoffice.org-langpack-xh_ZAUpgrade openoffice.org-langpack-itUpgrade openoffice.org-drawUpgrade openoffice.org-langpack-ko_KRUpgrade openoffice.org-langpack-urUpgrade openoffice.org-langpack-fi_FIUpgrade openoffice.org-emailmergeUpgrade openoffice.org-langpack-bg_BGUpgrade openoffice.org-langpack-da_DKUpgrade openoffice.org-langpack-nso_ZAUpgrade openoffice.org-langpack-hu_HUUpgrade openoffice.org-sdk-docUpgrade openoffice.org-baseUpgrade openoffice.org-langpack-eu_ESUpgrade openoffice.org-langpack-sl_SIUpgrade openoffice.org-xsltfilterUpgrade openoffice.org-langpack-ml_INUpgrade openoffice.org-langpack-hi_INUpgrade openoffice.org-langpack-sk_SKUpgrade openoffice.org-langpack-cy_GBUpgrade openoffice.org-langpack-tn_ZAUpgrade openoffice.org-sdkUpgrade openoffice.org-langpack-pt_BRUpgrade openoffice.org-writerUpgrade openoffice.org-langpack-pa_INUpgrade openoffice.org-langpack-tr_TRUpgrade openoffice.org-langpack-cs_CZUpgrade openoffice.org-langpack-el_GRUpgrade openoffice.org-langpack-nlUpgrade openoffice.org-langpack-bnUpgrade openoffice.org-langpack-as_INUpgrade openoffice.org-langpack-nr_ZAUpgrade openoffice.org-calcUpgrade openoffice.org-graphicfilterUpgrade openoffice.org-testtoolsUpgrade openoffice.org-langpack-gl_ESUpgrade openoffice.org-langpack-ca_ESUpgrade openoffice.org-langpack-ga_IEUpgrade openoffice.org-langpack-st_ZAUpgrade openoffice.org-mathUpgrade openoffice.org-impressUpgrade openoffice.org-langpack-zh_TWUpgrade openoffice.org-coreUpgrade openoffice.org-langpack-te_INUpgrade openoffice.org-langpack-ruUpgrade openoffice.org-langpack-ta_INUpgrade openoffice.org-langpack-hr_HRUpgrade openoffice.org-langpack-he_ILUpgrade openoffice.org-langpack-et_EEUpgrade openoffice.org-langpack-svUpgrade openoffice.org-langpack-gu_INUpgrade openoffice.org-langpack-ve_ZAUpgrade openoffice.org-langpack-nn_NOUpgrade openoffice.org-langpack-th_THUpgrade openoffice.org-pyunoUpgrade openoffice.org-langpack-frUpgrade openoffice.org-langpack-sr_CSUpgrade openoffice.org-langpack-pt_PTUpgrade openoffice.org-langpack-zh_CNUpgrade openoffice.org-langpack-or_INUpgrade openoffice.org-langpack-ss_ZAUpgrade openoffice.org-langpack-ts_ZAUpgrade openoffice.org-langpack-deUpgrade openoffice.org-langpack-mr_INUpgrade openoffice.org-langpack-zu_ZAUpgrade openoffice.org-langpack-lt_LTUpgrade openoffice.org-langpack-kn_INUpgrade openoffice.org-langpack-ms_MYUpgrade openoffice.org-langpack-af_ZA | Dec 1, 2016 | Aug 29, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub