9.3

CVE-2008-2152

Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in OpenOffice.org (OOo) 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow.

Data is provided by the National Vulnerability Database (NVD)
OpenofficeOpenoffice.Org Version2.0
OpenofficeOpenoffice.Org Version2.1
OpenofficeOpenoffice.Org Version2.2
OpenofficeOpenoffice.Org Version2.3
OpenofficeOpenoffice.Org Version2.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.04% 0.861
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C