Detections
Analytics
OpenOffice < 2.4.1 rtl_allocateMemory() Function Crafted Document Handling Integer Overflow
high Nessus Plugin ID 33129
Synopsis
The remote Windows host has a program affected by an integer overflow vulnerability.Description
The version of OpenOffice installed on the remote host reportedly contains an integer overflow vulnerability in 'rtl_allocateMemory()', a custom memory allocation function used by the application. If an attacker can trick a user on the affected system, he can leverage this issue to execute arbitrary code subject to his privileges.Solution
Upgrade to OpenOffice version 2.4.1 or later.See Also
http://www.nessus.org/u?b889d923
https://www.securityfocus.com/archive/1/493227/30/0/threaded
Plugin Details
Severity: High
ID: 33129
File Name: openoffice_241.nasl
Version: 1.12
Type: local
Agent: windows
Family: Windows
Published: 6/10/2008
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:sun:openoffice.org
Required KB Items: SMB/OpenOffice/Build
Exploit Ease: No known exploits are available
Reference Information
CVE: CVE-2008-2152
BID: 29622