Login Request a demo
Unscored severity · published Oct 20, 2004
CVE-2004-0752
OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow local users to read or list files of other users
–
CVSS
0.6%
EPSS
No
On KEV
Description
OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow local users to read or list files of other users.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 46% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openoffice · Openoffice
1.1.2 · source: NVD
Affected product
OP
Openoffice
Openoffice
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0752
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0752
marc.info
http://marc.info/?l=bugtraq&m=109483308421566&w=2
secunia.com
http://secunia.com/advisories/12302/
secunia.com
http://secunia.com/advisories/12546/
secunia.com
http://secunia.com/advisories/12668/
secunia.com
http://secunia.com/advisories/12914/
secunia.com
http://secunia.com/advisories/12932/
More from Openoffice
–
CVE-2008-2366
Untrusted search path vulnerability in a certain Red Hat build script for OpenOffice.org (OOo) 1.1.x on Red Hat Enterprise Linux (RHEL) 3 and 4 allows local users to gain…
–
CVE-2007-5745
Multiple heap-based buffer overflows in OpenOffice.org before 2.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro…
–
CVE-2007-4575
HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via crafted database documents, related…
–
CVE-2007-4251
OpenOffice.org (OOo) 2.2 does not properly handle files with multiple extensions, which allows user-assisted remote attackers to cause a denial of service
–
CVE-2007-0245
Heap-based buffer overflow in OpenOffice.org (OOo) 2.2.1 and earlier allows remote attackers to execute arbitrary code via a RTF file with a crafted prtdata tag with a length…