Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9.3
CVSSv2

CVE-2009-2949

Published: 16/02/2010 Updated: 07/02/2022
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Subscribe to Apache

Vulnerability Summary

Integer overflow in the XPMReader::ReadXPM function in filter.vcl/ixpm/svt_xpmread.cxx in OpenOffice.org (OOo) prior to 3.2 allows remote malicious users to execute arbitrary code via a crafted XPM file that triggers a heap-based buffer overflow.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

apache openoffice

canonical ubuntu linux 8.04

canonical ubuntu linux 8.10

canonical ubuntu linux 9.04

canonical ubuntu linux 9.10

debian debian linux 4.0

debian debian linux 5.0

Vendor Advisories

Red Hat: Important: openoffice.org security update
Synopsis Important: openofficeorg security update Type/Severity Security Advisory: Important Topic Updated openofficeorg packages that correct multiple security issues arenow available for Red Hat Enterprise Linux 3, 4, and 5This update has been rated as having important security impact by the RedHat Sec ...
Ubuntu Security Notice: openoffice.org vulnerabilities
It was discovered that the XML HMAC signature system did not correctly check certain lengths If an attacker sent a truncated HMAC, it could bypass authentication, leading to potential privilege escalation (CVE-2009-0217) ...
Debian Security Advisories: DSA-1995-1 openoffice.org -- several vulnerabilities
Several vulnerabilities have been discovered in the OpenOfficeorg office suite The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2010-0136 It was discovered that macro security settings were insufficiently enforced for VBA macros CVE-2009-0217 It was discovered that the W3C XML Signature recomme ...

References

CWE-190http://www.debian.org/security/2010/dsa-1995http://www.securityfocus.com/bid/38218http://securitytracker.com/id?1023591http://www.openoffice.org/security/bulletin.htmlhttp://www.vupen.com/english/advisories/2010/0366http://www.openoffice.org/security/cves/CVE-2009-2949.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=527540http://secunia.com/advisories/38568http://www.redhat.com/support/errata/RHSA-2010-0101.htmlhttp://secunia.com/advisories/38567http://www.ubuntu.com/usn/USN-903-1http://secunia.com/advisories/38695http://www.vupen.com/english/advisories/2010/0635http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.htmlhttp://secunia.com/advisories/38921http://www.vupen.com/english/advisories/2010/2905http://www.mandriva.com/security/advisories?name=MDVSA-2010:221http://www.us-cert.gov/cas/techalerts/TA10-287A.htmlhttp://www.gentoo.org/security/en/glsa/glsa-201408-19.xmlhttp://secunia.com/advisories/60799http://secunia.com/advisories/41818http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/56236https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10176https://access.redhat.com/errata/RHSA-2010:0101https://usn.ubuntu.com/903-1/https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook