Multiple heap-based buffer overflows in cppcanvas/source/mtfrenderer/emfplus.cxx in Go-oo 2.x and 3.x before 3.0.1, previously named ooo-build and related to OpenOffice.org (OOo), allow remote attackers to execute arbitrary code via a crafted EMF+ file, a similar issue to CVE-2008-2238.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade OpenOffice_org-officebeanUpgrade OpenOffice_orgUpgrade OpenOffice_org-filtersUpgrade OpenOffice_org-icon-themes-prebuiltUpgrade OpenOffice_org-pyunoUpgrade OpenOffice_org-gnomeUpgrade OpenOffice_org-calcUpgrade OpenOffice_org-plUpgrade OpenOffice_org-sdkUpgrade OpenOffice_org-mathUpgrade OpenOffice_org-deUpgrade OpenOffice_org-huUpgrade OpenOffice_org-frUpgrade OpenOffice_org-kdeUpgrade OpenOffice_org-jaUpgrade OpenOffice_org-zh-CNUpgrade OpenOffice_org-develUpgrade OpenOffice_org-skUpgrade OpenOffice_org-drawUpgrade OpenOffice_org-esUpgrade OpenOffice_org-galleriesUpgrade OpenOffice_org-branding-upstreamUpgrade OpenOffice_org-impressUpgrade OpenOffice_org-monoUpgrade OpenOffice_org-mailmergeUpgrade OpenOffice_org-zh-TWUpgrade OpenOffice_org-pt-BRUpgrade OpenOffice_org-testtoolUpgrade OpenOffice_org-baseUpgrade OpenOffice_org-itUpgrade OpenOffice_org-csUpgrade OpenOffice_org-sdk-docUpgrade OpenOffice_org-writer | Dec 12, 2013 | Sep 21, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub