Summary
This host has OpenOffice.Org installed, which is prone to remote code execution vulnerability.
Impact
Attackers can cause an out of bounds array access by tricking a user into opening a malicious document, also allow execution of arbitrary code.
Impact Level : System
Solution
Upgrade to OpenOffice.org Version 3.2.0 or later,
For updates refer to http://download.openoffice.org/index.html
Insight
The issue is due to a numeric truncation error within the rtl_allocateMemory() method in alloc_global.c file.
Affected
OpenOffice.org 2.4.1 and prior on Linux.
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2008-3282 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Adobe Acrobat Multiple Unspecified Vulnerabilities -01 Feb13 (Mac OS X)
- Active Perl Locale::Maketext Module Multiple Code Injection Vulnerabilities (Windows)
- Adobe Acrobat and Reader Multiple Vulnerabilities -Oct10 (Windows)
- Adobe Acrobat Multiple Vulnerabilities April-2012 (Mac OS X)
- Adobe Acrobat and Reader PDF Handling Code Execution Vulnerability (Linux)