Arbitrary Code Execution

2020-04-1000:57:24

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.006 Low

EPSS

Percentile

78.3%

JSON

openoffice.org is vulnerable to arbitrary code execution. The vulnerability exist as a directory traversal flaw was found in the way OpenOffice.org handled the installation of XSLT filter descriptions packaged in Java Archive (JAR) files, as well as the installation of OpenOffice.org Extension (.oxt) files. An attacker could use these flaws to create a specially-crafted XSLT filter description or extension file that, when opened, would cause the OpenOffice.org Extension Manager to modify files accessible to the user installing the JAR or extension file.

CPENameOperatorVersion
openoffice.orgeq2.3.0__6.5.2.el5_2
openoffice.orgeq2.3.0__6.11.el5
openoffice.orgeq2.3.0__6.11.el5_4.4
openoffice.orgeq2.3.0__6.5.el5
openoffice.orgeq2.3.0__6.5.4.el5_2
openoffice.orgeq2.3.0__6.11.el5_4.1
openoffice.orgeq2.3.0__6.10.el5
openoffice.orgeq2.3.0__6.5.1.el5_2

Name	Operator	Version
openoffice.org	eq	2.3.0__6.5.2.el5_2
openoffice.org	eq	2.3.0__6.11.el5
openoffice.org	eq	2.3.0__6.11.el5_4.4
openoffice.org	eq	2.3.0__6.5.el5
openoffice.org	eq	2.3.0__6.5.4.el5_2
openoffice.org	eq	2.3.0__6.11.el5_4.1
openoffice.org	eq	2.3.0__6.10.el5
openoffice.org	eq	2.3.0__6.5.1.el5_2