Lucene search

[email protected]CVE-2008-3282

HistoryAug 29, 2008 - 6:41 p.m.

CVE-2008-3282

2008-08-2918:41:00

CWE-681

[email protected]

web.nvd.nist.gov

cve-2008-3282

openoffice

integer overflow

memory allocator

denial of service

remote attack

arbitrary code execution

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.019 Low

EPSS

Percentile

88.5%

JSON

Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document, related to a “numeric truncation error,” a different vulnerability than CVE-2008-2152.

CPENameOperatorVersion
apache:openofficeapache openofficeeq2.4.1
fedoraproject:fedorafedoraproject fedoraeq9
fedoraproject:fedorafedoraproject fedoraeq8