Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document, related to a "numeric truncation error," a different vulnerability than CVE-2008-2152.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade openoffice.org-langpack-el_GRUpgrade openoffice.org-langpack-cs_CZUpgrade openoffice.org-langpack-gu_INUpgrade openoffice.org-langpack-st_ZAUpgrade openoffice.org-baseUpgrade openoffice.org-xsltfilterUpgrade openoffice.org-langpack-sk_SKUpgrade openoffice.org-langpack-ml_INUpgrade openoffice.org-calcUpgrade openoffice.org-langpack-ga_IEUpgrade openoffice.org-graphicfilterUpgrade openoffice.org-langpack-gl_ESUpgrade openoffice.org-impressUpgrade openoffice.org-langpack-urUpgrade openoffice.org-langpack-ko_KRUpgrade openoffice.org-emailmergeUpgrade openoffice.org-langpack-ca_ESUpgrade openoffice.org-langpack-zh_TWUpgrade openoffice.org-langpack-nr_ZAUpgrade openoffice.org-langpack-as_INUpgrade openoffice.org-langpack-da_DKUpgrade openoffice.org-langpack-bg_BGUpgrade openoffice.org-langpack-sl_SIUpgrade openoffice.org-langpack-tn_ZAUpgrade openoffice.org-testtoolsUpgrade openoffice.org-langpack-pt_BRUpgrade openoffice.org-mathUpgrade openoffice.org-sdkUpgrade openoffice.org-langpack-pl_PLUpgrade openoffice.org-drawUpgrade openoffice.org-langpack-lt_LTUpgrade openoffice.org-langpack-svUpgrade openoffice.org-langpack-bnUpgrade openoffice.org-langpack-esUpgrade openoffice.org-langpack-pt_PTUpgrade openoffice.org-langpack-arUpgrade openoffice.org-langpack-hu_HUUpgrade openoffice.org-sdk-docUpgrade openoffice.org-langpack-tr_TRUpgrade openoffice.org-langpack-eu_ESUpgrade openoffice.org-langpack-nso_ZAUpgrade openoffice.org-langpack-nlUpgrade openoffice.org-langpack-itUpgrade openoffice.org-headlessUpgrade openoffice.org-langpack-nb_NOUpgrade openoffice.org-langpack-cy_GBUpgrade openoffice.org-langpack-xh_ZAUpgrade openoffice.org-langpack-fi_FIUpgrade openoffice.org-langpack-hi_INUpgrade openoffice.org-langpack-et_EEUpgrade openoffice.org-langpack-frUpgrade openoffice.org-langpack-ta_INUpgrade openoffice.org-langpack-deUpgrade openoffice.org-langpack-ruUpgrade openoffice.org-langpack-or_INUpgrade openoffice.org-langpack-kn_INUpgrade openoffice.org-langpack-mr_INUpgrade openoffice.org-langpack-zh_CNUpgrade openoffice.org-langpack-af_ZAUpgrade openoffice.org-langpack-ja_JPUpgrade openoffice.org-langpack-ms_MYUpgrade openoffice.org-langpack-ve_ZAUpgrade openoffice.org-langpack-th_THUpgrade openoffice.org-langpack-he_ILUpgrade openoffice.org-langpack-ts_ZAUpgrade openoffice.org-langpack-zu_ZAUpgrade openoffice.org-langpack-pa_INUpgrade openoffice.org-writerUpgrade openoffice.org-langpack-sr_CSUpgrade openoffice.org-langpack-hr_HRUpgrade openoffice.org-langpack-te_INUpgrade openoffice.org-coreUpgrade openoffice.org-langpack-nn_NOUpgrade openoffice.org-langpack-ss_ZAUpgrade openoffice.org-pyunoUpgrade openoffice.org-javafilter | Dec 1, 2016 | Aug 29, 2008 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub