Lucene search
RootSSV:12168HistorySep 02, 2009 - 12:00 a.m.
OpenOffice Word文档表格解析整数溢出和堆溢出漏洞
2009-09-0200:00:00
Root
www.seebug.org
34
0.377 Low
EPSS
Percentile
96.8%
BUGTRAQ ID: 36186
CVE(CAN) ID: CVE-2009-0200,CVE-2009-0201
OpenOffice是个整合性的软件，包含了许多文字处理、表格、公式等办公工具。
OpenOffice在解析Word文档表格中的某些记录时存在堆溢出和整数下溢漏洞，用户受骗打开畸形的文档就可能触发这些溢出，导致执行任意指令。
OpenOffice < 3.1.1
厂商补丁：
OpenOffice
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
Related
nessus
nessus
RHEL 3 / 4 / 5 : openoffice.org (RHSA-2009:1426)
2013-01-24 00:00:00
openSUSE Security Update : OpenOffice_org-math (OpenOffice_org-math-1191)
2009-09-08 00:00:00
openvas
openvas
OpenOffice.org < 3.1.1 Word Documents Parsing Buffer Overflow Vulnerability - Linux
2009-09-08 00:00:00
OpenOffice.org Word Documents Parsing Buffer Overflow Vulnerability (Linux)
2009-09-08 00:00:00
CentOS Update for openoffice.org CESA-2009:1426 centos3 i386
2011-08-09 00:00:00
centos
centos
openoffice.org, openoffice.org2 security update
2009-09-04 16:48:04
debian
debian
[Backports-security-announce] Security update for openoffice.org
2009-09-05 16:47:38
[Backports-security-announce] Security update for openoffice.org
2009-09-05 16:47:38
[Backports-security-announce] Security update for openoffice.org
2009-09-05 16:53:12
fedora
fedora
[SECURITY] Fedora 10 Update: openoffice.org-3.0.1-15.6.fc10
2009-09-04 04:00:33
redhat
redhat
(RHSA-2009:1426) Important: openoffice.org security update
2009-09-04 00:00:00
oraclelinux
oraclelinux
openoffice.org security update
2009-09-05 00:00:00
osv
osv
openoffice.org - arbitrary code execution
2009-09-04 00:00:00
ubuntu
ubuntu
OpenOffice.org vulnerabilities
2009-10-01 00:00:00
securityvulns
securityvulns
OpenOffice multiple security vulnerabilities
2009-09-07 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenOffice Word Document Table Parsing Integer Underflow (CVE-2009-0200)
2010-04-13 00:00:00
OpenOffice Word Document Table Parsing Heap Overflow (CVE-2009-0201)
2010-04-14 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:35:50
Arbitrary Code Execution
2020-04-10 00:35:50
cve
cve
CVE-2009-0200
2009-09-02 17:30:00
CVE-2009-0201
2009-09-02 17:30:00
prion
prion
Heap overflow
2009-09-02 17:30:00
Heap overflow
2009-09-02 17:30:00
ubuntucve
ubuntucve
CVE-2009-0200
2009-09-02 00:00:00
CVE-2009-0201
2009-09-02 00:00:00
gentoo
gentoo
OpenOffice, LibreOffice: Multiple vulnerabilities
2014-08-31 00:00:00