Arbitrary Code Execution

2020-04-1000:57:25

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.017 Low

EPSS

Percentile

87.9%

JSON

openoffice.org is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer overflow flaw and an array index error were found in the way OpenOffice.org parsed certain Microsoft Office Word documents. An attacker could use these flaws to create a specially-crafted Microsoft Office Word document that, when opened, would cause OpenOffice.org to crash or, possibly, execute arbitrary code with the privileges of the user running OpenOffice.org.

CPENameOperatorVersion
openoffice.orgeq2.3.0__6.11.el5
openoffice.orgeq2.3.0__6.5.el5
openoffice.orgeq2.3.0__6.10.el5
openoffice.orgeq2.3.0__6.11.el5_4.4
openoffice.orgeq2.3.0__6.11.el5_4.1
openoffice.orgeq2.3.0__6.5.4.el5_2
openoffice.orgeq2.3.0__6.5.2.el5_2
openoffice.orgeq2.3.0__6.5.1.el5_2
openoffice.orgeq2.3.0__6.11.el5
openoffice.orgeq2.3.0__6.5.el5

Name	Operator	Version
openoffice.org	eq	2.3.0__6.11.el5
openoffice.org	eq	2.3.0__6.5.el5
openoffice.org	eq	2.3.0__6.10.el5
openoffice.org	eq	2.3.0__6.11.el5_4.4
openoffice.org	eq	2.3.0__6.11.el5_4.1
openoffice.org	eq	2.3.0__6.5.4.el5_2
openoffice.org	eq	2.3.0__6.5.2.el5_2
openoffice.org	eq	2.3.0__6.5.1.el5_2
openoffice.org	eq	2.3.0__6.11.el5
openoffice.org	eq	2.3.0__6.5.el5