Skip to main content

OpenOffice WMF and EMF Handling Heap Overflow Vulnerabilities

Last Update Date: 28 Jan 2011 Release Date: 30 Oct 2008 4955 Views

RISK: Medium Risk

Multiple vulnerabilities have been identified in OpenOffice, which could be exploited by remote attackers to compromise a vulnerable system.

1. Due to a heap overflow error when processing malformed WMF files, which could be exploited by attackers to execute arbitrary code by tricking a user into opening a malicious document.

2. Due to a heap overflow error when processing malformed EMF files, which could be exploited by attackers to execute arbitrary code by tricking a user into opening a malicious document.


Impact

  • Remote Code Execution

System / Technologies affected

  • OpenOffice.org versions prior to 2.4.2

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.


Vulnerability Identifier


Source


Related Link