9.3

CVE-2009-0200

Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer overflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Openoffice ≫ Openoffice.Org Version <= 3.1
Openoffice ≫ Openoffice.Org Version1.0-ru
Openoffice ≫ Openoffice.Org Version1.0.0
Openoffice ≫ Openoffice.Org Version1.0.1
Openoffice ≫ Openoffice.Org Version1.0.2
Openoffice ≫ Openoffice.Org Version1.0.3.1
Openoffice ≫ Openoffice.Org Version1.1
Openoffice ≫ Openoffice.Org Version1.1 Updatebeta
Openoffice ≫ Openoffice.Org Version1.1 Updatebeta2
Openoffice ≫ Openoffice.Org Version1.1 Updaterc1
Openoffice ≫ Openoffice.Org Version1.1 Updaterc3
Openoffice ≫ Openoffice.Org Version1.1.1
Openoffice ≫ Openoffice.Org Version1.1.2
Openoffice ≫ Openoffice.Org Version1.1.3
Openoffice ≫ Openoffice.Org Version1.1.4
Openoffice ≫ Openoffice.Org Version1.1.5
Openoffice ≫ Openoffice.Org Version1.9.84
Openoffice ≫ Openoffice.Org Version1.9.87
Openoffice ≫ Openoffice.Org Version1.9.91
Openoffice ≫ Openoffice.Org Version1.9.93
Openoffice ≫ Openoffice.Org Version1.9.95
Openoffice ≫ Openoffice.Org Version1.9.100
Openoffice ≫ Openoffice.Org Version1.9.104
Openoffice ≫ Openoffice.Org Version1.9.113
Openoffice ≫ Openoffice.Org Version1.9.118
Openoffice ≫ Openoffice.Org Version1.9.122
Openoffice ≫ Openoffice.Org Version1.9.130
Openoffice ≫ Openoffice.Org Version1.9.156
Openoffice ≫ Openoffice.Org Version1.9.680
Openoffice ≫ Openoffice.Org Version2.0
Openoffice ≫ Openoffice.Org Version2.0 Updatebeta2
Openoffice ≫ Openoffice.Org Version2.0.1
Openoffice ≫ Openoffice.Org Version2.0.2
Openoffice ≫ Openoffice.Org Version2.0.2 Updaterc1
Openoffice ≫ Openoffice.Org Version2.0.2 Updaterc2
Openoffice ≫ Openoffice.Org Version2.0.3
Openoffice ≫ Openoffice.Org Version2.0.4
Openoffice ≫ Openoffice.Org Version2.1
Openoffice ≫ Openoffice.Org Version2.1.152
Openoffice ≫ Openoffice.Org Version2.1.154
Openoffice ≫ Openoffice.Org Version2.2
Openoffice ≫ Openoffice.Org Version2.2.1
Openoffice ≫ Openoffice.Org Version2.3
Openoffice ≫ Openoffice.Org Version2.3.1
Openoffice ≫ Openoffice.Org Version2.4
Openoffice ≫ Openoffice.Org Version2.4.1
Openoffice ≫ Openoffice.Org Version2.4.1 Edition64-bit
Openoffice ≫ Openoffice.Org Version3.01
Openoffice ≫ Openoffice.Org Version605b
Openoffice ≫ Openoffice.Org Version609
Openoffice ≫ Openoffice.Org Version614
Openoffice ≫ Openoffice.Org Version619
Openoffice ≫ Openoffice.Org Version627
Openoffice ≫ Openoffice.Org Version633
Openoffice ≫ Openoffice.Org Version638
Openoffice ≫ Openoffice.Org Version638c
Openoffice ≫ Openoffice.Org Version641b
Openoffice ≫ Openoffice.Org Version641d
Openoffice ≫ Openoffice.Org Version643
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.72% 0.931
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/60799
http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml
http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html
http://secunia.com/advisories/35036
Vendor Advisory
http://development.openoffice.org/releases/3.1.1.html
http://secunia.com/advisories/36750
http://secunia.com/secunia_research/2009-26/
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-263508-1
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020715.1-1
http://www.debian.org/security/2009/dsa-1880
http://www.mandriva.com/security/advisories?name=MDVSA-2010:035
http://www.mandriva.com/security/advisories?name=MDVSA-2010:091
http://www.mandriva.com/security/advisories?name=MDVSA-2010:105
http://www.openoffice.org/security/cves/CVE-2009-0200-0201.html
http://www.securityfocus.com/archive/1/506194/100/0/threaded
http://www.securityfocus.com/bid/36200
http://www.vupen.com/english/advisories/2009/2490
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10881