Lucene search
HistoryOct 03, 2022 - 4:13 p.m.
CVE-2008-3437
cve
openoffice.org
update authenticity
vulnerability
evilgrade
dns cache poisoning
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
73.0%
OpenOffice.org (OOo) before 2.1.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.
Affected configurations
Node
openofficeopenoffice.orgMatch1.1.5
ORopenofficeopenoffice.orgMatch2.0
ORopenofficeopenoffice.orgMatch2.0.2
ORopenofficeopenoffice.orgMatch2.0.3
ORopenofficeopenoffice.orgMatch2.0.4
Related
redhatcve
redhatcve
CVE-2008-3437
2015-10-30 09:29:35
ubuntucve
ubuntucve
CVE-2008-3437
2008-08-01 00:00:00
prion
prion
Design/Logic Flaw
2008-08-01 14:41:00
nvd
nvd
CVE-2008-3437
2008-08-01 14:41:00
cvelist
cvelist
CVE-2008-3437
2022-10-03 16:13:42
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
73.0%
Related for CVE-2008-3437