Vulnerabilidad en OpenOffice.org (OOo) (CVE-2008-2237)
Gravedad CVSS v2.0:
ALTA
Tipo:
CWE-119
Restricción de operaciones inapropiada dentro de los límites del búfer de la memoria
Fecha de publicación:
30/10/2008
Última modificación:
09/04/2025
Descripción
Desbordamiento de búfer basado en montículo en OpenOffice.org (OOo) v2.x anterior a v2.4.2 permite a atacantes remotos ejecutar código de su elección mediante un archivo WMF manipulado asociado con un documento StarOffice/StarSuite.
Impacto
Puntuación base 2.0
9.30
Gravedad 2.0
ALTA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:a:openoffice:openoffice.org:*:*:*:*:*:*:*:* | ||
| cpe:2.3:a:openoffice:openoffice.org:*:*:*:*:*:*:*:* | 2.4.1 (incluyendo) | |
| cpe:2.3:a:openoffice:openoffice.org:2.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:openoffice:openoffice.org:2.0.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:openoffice:openoffice.org:2.0.3:*:*:*:*:*:*:* | ||
| cpe:2.3:a:openoffice:openoffice.org:2.0.4:*:*:*:*:*:*:* | ||
| cpe:2.3:a:openoffice:openoffice.org:2.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:openoffice:openoffice.org:2.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:openoffice:openoffice.org:2.2.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:openoffice:openoffice.org:2.3:*:*:*:*:*:*:* | ||
| cpe:2.3:a:openoffice:openoffice.org:2.3.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:openoffice:openoffice.org:2.4:*:*:*:*:*:*:* | ||
| cpe:2.3:a:openoffice:openoffice.org:2.4.1:*:64-bit:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página
Referencias a soluciones, herramientas e información
- http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html
- http://neowiki.neooffice.org/index.php/NeoOffice_2.2.5_Patch_3_New_Features#Security_fixes
- http://secunia.com/advisories/32419
- http://secunia.com/advisories/32461
- http://secunia.com/advisories/32463
- http://secunia.com/advisories/32489
- http://secunia.com/advisories/32676
- http://secunia.com/advisories/32856
- http://secunia.com/advisories/32872
- http://secunia.com/advisories/33140
- http://security.gentoo.org/glsa/glsa-200812-13.xml
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-242627-1
- http://www.debian.org/security/2008/dsa-1661
- http://www.openoffice.org/security/cves/CVE-2008-2237.html
- http://www.redhat.com/support/errata/RHSA-2008-0939.html
- http://www.securityfocus.com/bid/31962
- http://www.securitytracker.com/id?1021120=
- http://www.ubuntu.com/usn/usn-677-1
- http://www.ubuntu.com/usn/usn-677-2
- http://www.vupen.com/english/advisories/2008/2947
- http://www.vupen.com/english/advisories/2008/3103
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46165
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10784
- https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00905.html
- https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00923.html
- http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html
- http://neowiki.neooffice.org/index.php/NeoOffice_2.2.5_Patch_3_New_Features#Security_fixes
- http://secunia.com/advisories/32419
- http://secunia.com/advisories/32461
- http://secunia.com/advisories/32463
- http://secunia.com/advisories/32489
- http://secunia.com/advisories/32676
- http://secunia.com/advisories/32856
- http://secunia.com/advisories/32872
- http://secunia.com/advisories/33140
- http://security.gentoo.org/glsa/glsa-200812-13.xml
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-242627-1
- http://www.debian.org/security/2008/dsa-1661
- http://www.openoffice.org/security/cves/CVE-2008-2237.html
- http://www.redhat.com/support/errata/RHSA-2008-0939.html
- http://www.securityfocus.com/bid/31962
- http://www.securitytracker.com/id?1021120=
- http://www.ubuntu.com/usn/usn-677-1
- http://www.ubuntu.com/usn/usn-677-2
- http://www.vupen.com/english/advisories/2008/2947
- http://www.vupen.com/english/advisories/2008/3103
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46165
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10784
- https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00905.html
- https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00923.html