Lucene search

K
cvelistMitreCVELIST:CVE-2008-3437
HistoryOct 03, 2022 - 4:13 p.m.

CVE-2008-3437

2022-10-0316:13:42
mitre
www.cve.org
openoffice.org
update authenticity
vulnerability
evilgrade
dns cache poisoning

7.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.0%

OpenOffice.org (OOo) before 2.1.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.

7.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.0%

Related for CVELIST:CVE-2008-3437