Lucene search

K
cve[email protected]CVE-2009-0201
HistorySep 02, 2009 - 5:30 p.m.

CVE-2009-0201

2009-09-0217:30:00
CWE-119
web.nvd.nist.gov
73
cve-2009-0201
openoffice.org
staroffice
starsuite
buffer overflow
remote code execution
word document
table parsing

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

High

0.334 Low

EPSS

Percentile

97.1%

Heap-based buffer overflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via unspecified records in a crafted Word document, related to β€œtable parsing.”

Affected configurations

NVD
Node
openofficeopenoffice.orgRange≀3.1
OR
openofficeopenoffice.orgMatch1.1.2
OR
openofficeopenoffice.orgMatch1.1.3
OR
openofficeopenoffice.orgMatch1.1.4
OR
openofficeopenoffice.orgMatch1.1.5
OR
openofficeopenoffice.orgMatch2.0
OR
openofficeopenoffice.orgMatch2.0.2
OR
openofficeopenoffice.orgMatch2.0.3
OR
openofficeopenoffice.orgMatch2.0.4
OR
openofficeopenoffice.orgMatch2.1
OR
openofficeopenoffice.orgMatch2.2
OR
openofficeopenoffice.orgMatch2.2.1
OR
openofficeopenoffice.orgMatch2.3
OR
openofficeopenoffice.orgMatch2.3.1
OR
openofficeopenoffice.orgMatch2.4
OR
openofficeopenoffice.orgMatch2.4.1
OR
openofficeopenoffice.orgMatch2.4.164-bit

References

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

High

0.334 Low

EPSS

Percentile

97.1%