Buffer overflow in Go-Oo

CVE-2009-2140

Multiple heap-based buffer overflows in cppcanvas/source/mtfrenderer/emfplus.cxx in Go-oo 2.x and 3.x before 3.0.1, previously named ooo-build and related to OpenOffice.org (OOo), allow remote attackers to execute arbitrary code via a crafted EMF+ file, a similar issue to CVE-2008-2238.

Vulnerability class: Buffer Overflow

EPSS: 0.057 (92.2th percentile) — read the EPSS interpretation.

Affected products

  • Go-oo — versions 2.3.0, 2.4.0, 2.4.1
  • N/a — versions n/a

Weakness classification (CWE)

References