Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-2949
HistoryFeb 16, 2010 - 12:00 a.m.

CVE-2009-2949

2010-02-1600:00:00
ubuntu.com
ubuntu.com
32

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.121 Low

EPSS

Percentile

95.4%

Integer overflow in the XPMReader::ReadXPM function in
filter.vcl/ixpm/svt_xpmread.cxx in OpenOffice.org (OOo) before 3.2 allows
remote attackers to execute arbitrary code via a crafted XPM file that
triggers a heap-based buffer overflow.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchopenoffice.org< 1:2.4.1-1ubuntu2.3UNKNOWN
ubuntu8.10noarchopenoffice.org< 1:2.4.1-11ubuntu2.3UNKNOWN
ubuntu9.04noarchopenoffice.org< 1:3.0.1-9ubuntu3.2UNKNOWN
ubuntu9.10noarchopenoffice.org< 1:3.1.1-5ubuntu1.1UNKNOWN

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.121 Low

EPSS

Percentile

95.4%