CVE-2008-2238

EPSS 6.75%
Veröffentlicht 30.10.2008 20:00:00
Zuletzt bearbeitet 16.06.2026 22:53:23
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple integer overflows in OpenOffice.org (OOo) 2.x before 2.4.2 allow remote attackers to execute arbitrary code via crafted EMR records in an EMF file associated with a StarOffice/StarSuite document, which trigger a heap-based buffer overflow.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 30

NVD 13 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Openoffice ≫ Openoffice.Org

Openoffice ≫ Openoffice.Org Version <= 2.4.1

Openoffice ≫ Openoffice.Org Version2.0

Openoffice ≫ Openoffice.Org Version2.0.2

Openoffice ≫ Openoffice.Org Version2.0.3

Openoffice ≫ Openoffice.Org Version2.0.4

Openoffice ≫ Openoffice.Org Version2.1

Openoffice ≫ Openoffice.Org Version2.2

Openoffice ≫ Openoffice.Org Version2.2.1

Openoffice ≫ Openoffice.Org Version2.3

Openoffice ≫ Openoffice.Org Version2.3.1

Openoffice ≫ Openoffice.Org Version2.4

Openoffice ≫ Openoffice.Org Version2.4.1 Edition64-bit

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	6.75%	0.931

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html

http://secunia.com/advisories/32872

http://neowiki.neooffice.org/index.php/NeoOffice_2.2.5_Patch_3_New_Features#Security_fixes

http://secunia.com/advisories/32419

Vendor Advisory

http://secunia.com/advisories/32461

Vendor Advisory

http://secunia.com/advisories/32463

http://secunia.com/advisories/32489

Vendor Advisory

http://secunia.com/advisories/32676

http://secunia.com/advisories/32856

http://secunia.com/advisories/33140

http://security.gentoo.org/glsa/glsa-200812-13.xml

http://www.debian.org/security/2008/dsa-1661

Patch

http://www.redhat.com/support/errata/RHSA-2008-0939.html

http://www.securityfocus.com/bid/31962

Patch

http://www.ubuntu.com/usn/usn-677-1

http://www.ubuntu.com/usn/usn-677-2

http://www.vupen.com/english/advisories/2008/2947

http://www.vupen.com/english/advisories/2008/3103

https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00905.html

https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00923.html

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=750

http://sunsolve.sun.com/search/document.do?assetkey=1-26-243226-1

http://www.openoffice.org/security/cves/CVE-2008-2238.html

Patch

http://www.securitytracker.com/id?1021121

http://www.vupen.com/english/advisories/2008/3153

https://exchange.xforce.ibmcloud.com/vulnerabilities/46166

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10849

https://nvd.nist.gov/vuln/detail/CVE-2008-2238

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-2238

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-2238

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-2238