Published: 08/09/2009 Updated: 19/07/2010

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in svtools/source/filter.vcl/wmf/enhwmf.cxx in Go-oo 2.x and 3.x prior to 3.0.1, previously named ooo-build and related to OpenOffice.org (OOo), allows remote malicious users to execute arbitrary code via a crafted EMF file, a similar issue to CVE-2008-2238.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sun openoffice.org 2.4.0
sun openoffice.org 2.4.1
sun openoffice.org 2.4.2
sun openoffice.org 3.0.0
sun openoffice.org 2.4.3
sun openoffice.org 2.1.0
sun openoffice.org 2.3.0
sun openoffice.org 2.2.1
sun openoffice.org 2.0.3
sun openoffice.org 2.0.0
sun openoffice.org 2.2.0
sun openoffice.org 2.3.1
sun openoffice.org 2.0.4

Dyon Balding discovered flaws in the way OpenOfficeorg handled tables If a user were tricked into opening a specially crafted Word document, a remote attacker might be able to execute arbitrary code with user privileges (CVE-2009-0200, CVE-2009-0201) ...

Several vulnerabilities have been discovered in the OpenOfficeorg office suite The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-0200 Dyon Balding of Secunia Research has discovered a vulnerability, which can be exploited by opening a specially crafted Microsoft Word document When readi ...

CWE-119 http://secunia.com/advisories/36613 http://www.securityfocus.com/bid/36291 http://www.debian.org/security/2009/dsa-1880 http://cgit.freedesktop.org/ooo-build/ooo-build/commit/?id=49b4e38571912a7d28c4044e5b2bd57e51c77d55 http://marc.info/?l=oss-security&m=125258116800739&w=2 http://marc.info/?l=oss-security&m=125265261125765&w=2 http://marc.info/?l=oss-security&m=125363445702917&w=2 http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html http://www.openwall.com/lists/oss-security/2009/10/26/2 http://www.mandriva.com/security/advisories?name=MDVSA-2010:035 http://www.mandriva.com/security/advisories?name=MDVSA-2010:091 http://www.mandriva.com/security/advisories?name=MDVSA-2010:105 https://usn.ubuntu.com/840-1/https://nvd.nist.gov

CVE-2009-2139

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect