Vulnerability in Openoffice Openoffice.org

CVE-2009-0200

Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer…

EPSS: 0.067 (93.2th percentile) — read the EPSS interpretation.

Affected products

Openoffice Openoffice.org — versions 1.0-ru, 1.0.0, 1.0.1
N/a — versions n/a

Weakness classification (CWE)

CWE-189

References

PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (vendor-advisory, x_refsource_GENTOO)
PSIRT-CNA@flexerasoftware.com (x_refsource_MISC)
PSIRT-CNA@flexerasoftware.com (vendor-advisory, x_refsource_MANDRIVA)
PSIRT-CNA@flexerasoftware.com (vendor-advisory, x_refsource_MANDRIVA)
PSIRT-CNA@flexerasoftware.com (x_refsource_MISC, Vendor Advisory)
PSIRT-CNA@flexerasoftware.com (vendor-advisory, x_refsource_MANDRIVA)
PSIRT-CNA@flexerasoftware.com (vendor-advisory, x_refsource_SUNALERT)
PSIRT-CNA@flexerasoftware.com (vendor-advisory, x_refsource_SUSE)