What is CVE-2008-3282?

CVE-2008-3282 is a high-severity vulnerability in Apache Openoffice, classified under Incorrect Conversion between Numeric Types. CVSS score: 7.8/10. Published 2008-08-29.

How severe is CVE-2008-3282?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Apache Openoffice

CVE-2008-3282

Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document, related to a "numeric truncation error," a different vulnerability than CVE-2008-2152.

Published 2008-08-29 · last modified 2026-06-16.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.108 (95.8th percentile), scored 2026-10-20.

Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 96th percentile — 95.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.108 · newest: 0.108 · change: 0.000

Affected products

Apache Openoffice — versions 2.4.1
Fedoraproject Fedora — versions 8, 9

Weakness classification (CWE)

CWE-681 — Incorrect Conversion between Numeric Types

References

secunia.com/advisories/31646 (Broken Link, third-party-advisory)
www.redhat.com/archives/fedora-package-announce/2008-September/msg00120.html (vendor-advisory, Mailing List)
securitytracker.com/id (VDB Entry, Third Party Advisory, vdb-entry, Broken Link)
secunia.com/advisories/31640 (Broken Link, third-party-advisory)
www.vupen.com/english/advisories/2008/2449 (vdb-entry, Broken Link)
www.redhat.com/archives/fedora-package-announce/2008-September/msg00494.html (vendor-advisory, Mailing List)
exchange.xforce.ibmcloud.com/vulnerabilities/44742 (VDB Entry, Third Party Advisory, vdb-entry)
bugzilla.redhat.com/show_bug.cgi (Issue Tracking)
www.redhat.com/support/errata/RHSA-2008-0835.html (vendor-advisory, Broken Link)
www.securityfocus.com/bid/30866 (VDB Entry, Third Party Advisory, vdb-entry, Broken Link)

Frequently asked questions

What is CVE-2008-3282?: CVE-2008-3282 is a high-severity vulnerability in Apache Openoffice, classified under Incorrect Conversion between Numeric Types. CVSS score: 7.8/10. Published 2008-08-29.
How severe is CVE-2008-3282?: High severity. CVSS v3 base score is 7.8 out of 10.