CVE-2008-0320
HIGH 9.3EPSS 56.9%
Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream.
- CVSS v2.0 NVD
- 9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C - EPSS
- 56.86% chance of exploitation in the next 30 days, 99th percentile
- Published
- 2008-04-17
- Updated
- 2024-08-07
Metasploit modules (1)
ExploitDB entries (1)
Security advisories
- http://secunia.com/advisories/29844
- http://secunia.com/advisories/29852
- http://secunia.com/advisories/29864
- http://secunia.com/advisories/29871
- http://secunia.com/advisories/29910
- http://secunia.com/advisories/29913
- http://secunia.com/advisories/29987
- http://secunia.com/advisories/30100
- http://secunia.com/advisories/30179
- http://www.redhat.com/support/errata/RHSA-2008-0176.html
- http://www.vupen.com/english/advisories/2008/1253/references
- http://www.vupen.com/english/advisories/2008/1375/references
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:090
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:095
- http://www.redhat.com/support/errata/RHSA-2008-0175.html
- http://www.securityfocus.com/bid/28819
- http://www.ubuntu.com/usn/usn-609-1