9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.053 Low
EPSS
Percentile
93.0%
Heap-based buffer overflow in the GIFLZWDecompressor::GIFLZWDecompressor
function in filter.vcl/lgif/decode.cxx in OpenOffice.org (OOo) before 3.2
allows remote attackers to cause a denial of service (application crash) or
possibly execute arbitrary code via a crafted GIF file, related to LZW
decompression.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 8.04 | noarch | openoffice.org | < 1:2.4.1-1ubuntu2.3 | UNKNOWN |
ubuntu | 8.10 | noarch | openoffice.org | < 1:2.4.1-11ubuntu2.3 | UNKNOWN |
ubuntu | 9.04 | noarch | openoffice.org | < 1:3.0.1-9ubuntu3.2 | UNKNOWN |
ubuntu | 9.10 | noarch | openoffice.org | < 1:3.1.1-5ubuntu1.1 | UNKNOWN |