Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-3282
HistoryAug 29, 2008 - 6:41 p.m.

CVE-2008-3282

2008-08-2918:41:00
CWE-681
[email protected]
web.nvd.nist.gov
32
cve-2008-3282
openoffice
integer overflow
memory allocator
denial of service
remote attack
arbitrary code execution

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.1 High

AI Score

Confidence

High

0.087 Low

EPSS

Percentile

94.5%

JSON

Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document, related to a β€œnumeric truncation error,” a different vulnerability than CVE-2008-2152.

Affected configurations

NVD
Node
apacheopenofficeMatch2.4.1x64
Node
fedoraprojectfedoraMatch8
OR
fedoraprojectfedoraMatch9

Related

ubuntucve 2
openvas 46
nvd 2
prion 2
cvelist 2
nessus 20
fedora 7
seebug 2
veracode 2
redhat 3
centos 3
cve 1
securityvulns 2
gentoo 1
oraclelinux 1
ubuntucve
ubuntucve
CVE-2008-3282
2008-08-29 00:00:00
CVE-2008-2152
2008-06-10 00:00:00
openvas
openvas
OpenOffice.org <= 2.4.1 Vulnerability - Windows
2008-09-09 00:00:00
OpenOffice.org <= 2.4.1 Multiple Vulnerabilities - Linux
2008-09-09 00:00:00
OpenOffice.org <= 2.4.1 vulnerability (Windows)
2008-09-09 00:00:00
nvd
nvd
CVE-2008-3282
2008-08-29 18:41:00
CVE-2008-2152
2008-06-10 18:32:00
prion
prion
Integer overflow
2008-08-29 18:41:00
Integer overflow
2008-06-10 18:32:00
cvelist
cvelist
CVE-2008-3282
2008-08-29 18:00:00
CVE-2008-2152
2008-06-10 18:00:00
nessus
nessus
CentOS 5 : openoffice.org (CESA-2008:0835)
2010-01-06 00:00:00
RHEL 5 : openoffice.org (RHSA-2008:0835)
2008-08-28 00:00:00
Fedora 8 : openoffice.org-2.3.0-6.16.fc8 (2008-7531)
2008-09-10 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: openoffice.org-2.4.1-17.6.fc9
2008-09-10 06:39:47
[SECURITY] Fedora 8 Update: openoffice.org-2.3.0-6.16.fc8
2008-09-10 07:24:03
[SECURITY] Fedora 9 Update: openoffice.org-2.4.2-18.1.fc9
2008-10-31 10:24:00
seebug
seebug
OpenOffice 'rtl_allocateMemory()'θΏœη¨‹δ»£η ζ‰§θ‘ŒζΌζ΄ž
2008-08-28 00:00:00
OpenOffice rtl_allocateMemory()ε‡½ζ•°ε †ζΊ’ε‡ΊζΌζ΄ž
2008-06-14 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:25:24
Arbitrary Code Execution
2020-04-10 00:31:56
redhat
redhat
(RHSA-2008:0835) Important: openoffice.org security update
2008-08-27 00:00:00
(RHSA-2008:0537) Important: openoffice.org security update
2008-06-12 00:00:00
(RHSA-2008:0538) Important: openoffice.org security update
2008-06-12 00:00:00
centos
centos
openoffice.org security update
2008-08-30 22:57:31
openoffice.org2 security update
2008-06-27 10:26:05
openoffice.org security update
2008-06-14 08:53:15
cve
cve
CVE-2008-2152
2008-06-10 18:32:00
securityvulns
securityvulns
OpenOffice integer overflow
2008-06-10 00:00:00
iDefense Security Advisory 06.10.08: Multiple Vendor OpenOffice rtl_allocateMemory&#40;&#41; Integer Overflow Vulnerability
2008-06-10 00:00:00
gentoo
gentoo
OpenOffice.org: User-assisted execution of arbitrary code
2008-07-09 00:00:00
oraclelinux
oraclelinux
openoffice.org security update
2008-06-13 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.1 High

AI Score

Confidence

High

0.087 Low

EPSS

Percentile

94.5%

JSON
Related for CVE-2008-3282
ubuntucve2openvas46nvd2prion2cvelist2nessus20fedora7seebug2veracode2redhat3centos3cve1securityvulns2gentoo1oraclelinux1