Arbitrary Code Execution

2020-04-1000:57:25

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.018 Low

EPSS

Percentile

88.4%

JSON

openoffice.org is vulnerable to arbitrary code execution. The vulnerability exists as an array index error and an integer signedness error were found in the way OpenOffice.org parsed certain Rich Text Format (RTF) files. An attacker could use these flaws to create a specially-crafted RTF file that, when opened, would cause OpenOffice.org to crash or, possibly, execute arbitrary code with the privileges of the user running OpenOffice.org.

CPENameOperatorVersion
openoffice.orgeq2.3.0__6.11.el5
openoffice.orgeq2.3.0__6.5.2.el5_2
openoffice.orgeq2.3.0__6.11.el5_4.4
openoffice.orgeq2.3.0__6.5.el5
openoffice.orgeq2.3.0__6.5.4.el5_2
openoffice.orgeq2.3.0__6.11.el5_4.1
openoffice.orgeq2.3.0__6.10.el5
openoffice.orgeq2.3.0__6.5.1.el5_2

Name	Operator	Version
openoffice.org	eq	2.3.0__6.11.el5
openoffice.org	eq	2.3.0__6.5.2.el5_2
openoffice.org	eq	2.3.0__6.11.el5_4.4
openoffice.org	eq	2.3.0__6.5.el5
openoffice.org	eq	2.3.0__6.5.4.el5_2
openoffice.org	eq	2.3.0__6.11.el5_4.1
openoffice.org	eq	2.3.0__6.10.el5
openoffice.org	eq	2.3.0__6.5.1.el5_2