Lucene search

K
nvd[email protected]NVD:CVE-2009-0259
HistoryJan 22, 2009 - 11:30 p.m.

CVE-2009-0259

2009-01-2223:30:04
CWE-399
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.897 High

EPSS

Percentile

98.8%

The Word processor in OpenOffice.org 1.1.2 through 1.1.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) .doc, (2) .wri, or (3) .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008, as demonstrated by 2008-crash.doc.rar, and a similar issue to CVE-2008-4841.

Affected configurations

NVD
Node
openofficeopenoffice.orgMatch1.1.2
OR
openofficeopenoffice.orgMatch1.1.3
OR
openofficeopenoffice.orgMatch1.1.4
OR
openofficeopenoffice.orgMatch1.1.5

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.897 High

EPSS

Percentile

98.8%