CVE-2008-0320

2008-04-1719:05:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2008-0320

ole importer

denial of service

remote attackers

arbitrary code

buffer overflow

openoffice.org

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.924 High

EPSS

Percentile

99.0%

JSON

Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream.

Affected configurations

NVD

Node

openofficeopenoffice.orgRange≤2.3.1

openofficeopenoffice.orgMatch2.0.3

openofficeopenoffice.orgMatch2.1

openofficeopenoffice.orgMatch2.2

openofficeopenoffice.orgMatch2.2.1

openofficeopenoffice.orgMatch2.3

CPENameOperatorVersion
openoffice:openoffice.orgopenoffice openoffice.orgle2.3.1
openoffice:openoffice.orgopenoffice openoffice.orgeq2.0.3
openoffice:openoffice.orgopenoffice openoffice.orgeq2.1
openoffice:openoffice.orgopenoffice openoffice.orgeq2.2
openoffice:openoffice.orgopenoffice openoffice.orgeq2.2.1
openoffice:openoffice.orgopenoffice openoffice.orgeq2.3

CPE	Name	Operator	Version
openoffice:openoffice.org	openoffice openoffice.org	le	2.3.1
openoffice:openoffice.org	openoffice openoffice.org	eq	2.0.3
openoffice:openoffice.org	openoffice openoffice.org	eq	2.1
openoffice:openoffice.org	openoffice openoffice.org	eq	2.2
openoffice:openoffice.org	openoffice openoffice.org	eq	2.2.1
openoffice:openoffice.org	openoffice openoffice.org	eq	2.3