Arbitrary Code Execution

2020-04-1000:57:26

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

12.9%

JSON

openoffice.org is vulnerable to arbitrary code execution. The vulnerability exists as a flaw was found in the script that launches OpenOffice.org. In some situations, a “.” character could be included in the LD_LIBRARY_PATH variable, allowing a local attacker to execute arbitrary code with the privileges of the user running OpenOffice.org, if that user ran OpenOffice.org from within an attacker-controlled directory.

CPENameOperatorVersion
openoffice.orgeq2.3.0__6.11.el5
openoffice.orgeq2.3.0__6.5.2.el5_2
openoffice.orgeq2.3.0__6.11.el5_4.4
openoffice.orgeq2.3.0__6.5.el5
openoffice.orgeq2.3.0__6.5.4.el5_2
openoffice.orgeq2.3.0__6.11.el5_4.1
openoffice.orgeq2.3.0__6.10.el5
openoffice.orgeq2.3.0__6.5.1.el5_2

Name	Operator	Version
openoffice.org	eq	2.3.0__6.11.el5
openoffice.org	eq	2.3.0__6.5.2.el5_2
openoffice.org	eq	2.3.0__6.11.el5_4.4
openoffice.org	eq	2.3.0__6.5.el5
openoffice.org	eq	2.3.0__6.5.4.el5_2
openoffice.org	eq	2.3.0__6.11.el5_4.1
openoffice.org	eq	2.3.0__6.10.el5
openoffice.org	eq	2.3.0__6.5.1.el5_2