Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-2950
HistoryFeb 16, 2010 - 12:00 a.m.

CVE-2009-2950

2010-02-1600:00:00
ubuntu.com
ubuntu.com
15

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.053 Low

EPSS

Percentile

93.0%

Heap-based buffer overflow in the GIFLZWDecompressor::GIFLZWDecompressor
function in filter.vcl/lgif/decode.cxx in OpenOffice.org (OOo) before 3.2
allows remote attackers to cause a denial of service (application crash) or
possibly execute arbitrary code via a crafted GIF file, related to LZW
decompression.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchopenoffice.org< 1:2.4.1-1ubuntu2.3UNKNOWN
ubuntu8.10noarchopenoffice.org< 1:2.4.1-11ubuntu2.3UNKNOWN
ubuntu9.04noarchopenoffice.org< 1:3.0.1-9ubuntu3.2UNKNOWN
ubuntu9.10noarchopenoffice.org< 1:3.1.1-5ubuntu1.1UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.053 Low

EPSS

Percentile

93.0%