9.3

CVE-2009-2949

Integer overflow in the XPMReader::ReadXPM function in filter.vcl/ixpm/svt_xpmread.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to execute arbitrary code via a crafted XPM file that triggers a heap-based buffer overflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apache ≫ Openoffice Version < 3.2.0
Canonical ≫ Ubuntu Linux Version8.04 SwEdition-
Canonical ≫ Ubuntu Linux Version8.10
Canonical ≫ Ubuntu Linux Version9.04
Canonical ≫ Ubuntu Linux Version9.10
Debian ≫ Debian Linux Version4.0
Debian ≫ Debian Linux Version5.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 14.09% 0.961
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

http://secunia.com/advisories/38567
Broken Link
http://secunia.com/advisories/38568
Broken Link
http://secunia.com/advisories/41818
Broken Link
http://secunia.com/advisories/60799
Broken Link
http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml
Third Party Advisory
http://www.vupen.com/english/advisories/2010/0366
Patch
Broken Link
http://www.openoffice.org/security/bulletin.html
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html
Third Party Advisory
http://secunia.com/advisories/38695
Broken Link
http://secunia.com/advisories/38921
Broken Link
http://www.debian.org/security/2010/dsa-1995
Third Party Advisory
http://www.ubuntu.com/usn/USN-903-1
Third Party Advisory
http://www.vupen.com/english/advisories/2010/0635
Broken Link
http://www.us-cert.gov/cas/techalerts/TA10-287A.html
Third Party Advisory
US Government Resource
http://securitytracker.com/id?1023591
Third Party Advisory
Broken Link
VDB Entry
http://www.mandriva.com/security/advisories?name=MDVSA-2010:221
Broken Link
http://www.openoffice.org/security/cves/CVE-2009-2949.html
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0101.html
Broken Link
http://www.securityfocus.com/bid/38218
Third Party Advisory
Broken Link
VDB Entry
http://www.vupen.com/english/advisories/2010/2905
Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=527540
Third Party Advisory
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/56236
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10176
Tool Signature