Skip to main content

OpenOffice "rtl_allocateMemory()" Integer Overflow Vulnerability

Last Update Date: 28 Jan 2011 Release Date: 11 Jun 2008 4788 Views

RISK: Medium Risk

A vulnerability has been identified in OpenOffice.org, which could be exploited by attackers to cause a denial of service or compromise an affected system. This issue is caused by an integer overflow error in the custom memory allocation function "rtl_allocateMemory()" when processing malformed data, which could be exploited by attackers to crash a vulnerable application or execute arbitrary commands by tricking a user into opening a specially crafted file.


Impact

  • Remote Code Execution

System / Technologies affected

  • OpenOffice.org versions 2.x

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.


Vulnerability Identifier


Source


Related Link