Mandriva Linux Security Advisory : openoffice.org (MDVSA-2008:138)

Integer overflow in the rtlallocateMemory function in sal/rtl/source/allocglobal.c in OpenOffice.org OOo 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow. The updated packages have been patched to fix the issue...

Mandriva Update for openoffice.org MDVSA-2008:137 (openoffice.org)

Check for the Version of openoffice.org OpenVAS Vulnerability Test Mandriva Update for openoffice.org MDVSA-2008:137 openoffice.org Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

OpenOffice.org: User-assisted execution of arbitrary code

Background OpenOffice.org is an open source office productivity suite, including word processing, spreadsheet, presentation, drawing, data charting, formula editing, and file conversion facilities. Description Sean Larsson iDefense Labs reported an integer overflow in the function rtlallocateMemo...

OpenOffice rtl_allocateMemory()函数堆溢出漏洞

BUGTRAQ ID: 29622 CVECAN ID: CVE-2008-2152 OpenOffice是个整合性的软件，包含了许多文字处理、表格、公式等办公工具。 OpenOffice的rtlallocateMemory函数没有执行整数溢出检查便以8字节为边界环绕分配请求，以下是sal/rtl/source/allocglobal.c中的漏洞代码： 191 void 192 SALCALL rtlallocateMemory salSize n 193 194 void p = 0; 195 if n 0 196 197 char addr; 198 salSize size =...

Integer overflow

Integer overflow in the rtlallocateMemory function in sal/rtl/source/allocglobal.c in OpenOffice.org OOo 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow...

CVE-2008-2152

CVE-2008-2152 affects OpenOffice.org 2.0–2.4, via an integer/heap overflow in the rtl_allocateMemory routine (sal/rtl/source/alloc_global.c) that can be triggered by a crafted file. This heap-based overflow could allow a remote attacker to crash OpenOffice.org or potentially execute arbitrary cod...

OpenOffice integer overflow

Buffer overflow in rtlallocateMemory on different file formats parsing...

OpenOffice < 2.4.1 rtl_allocateMemory Integer Overflow

Binary data 4538.prm...