Unscored severity · published Oct 30, 2008
CVE-2008-2238
Multiple integer overflows in OpenOffice.org (OOo) 2.x before 2.4.2 allow remote attackers to execute arbitrary code via crafted EMR records in an EMF file associated with a…
–
CVSS
6.7%
EPSS
No
On KEV
Description
Multiple integer overflows in OpenOffice.org (OOo) 2.x before 2.4.2 allow remote attackers to execute arbitrary code via crafted EMR records in an EMF file associated with a StarOffice/StarSuite document, which trigger a heap-based buffer overflow.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.7% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openoffice.org · Openoffice
through 2.4.1; 2.0; 2.0.2; 2.0.3; 2.0.4; 2.1; +6 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2238
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2238
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=750
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html
neowiki.neooffice.org
http://neowiki.neooffice.org/index.php/NeoOffice_2.2.5_Patch_3_New_Features#Security_fixes
Vendor Advisory
http://secunia.com/advisories/32419
Vendor Advisory
http://secunia.com/advisories/32461
secunia.com
http://secunia.com/advisories/32463
More from Openoffice.org
–
CVE-2010-2936
Integer overflow in simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or…
–
CVE-2010-2935
simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle integer values associated with dictionary property items, which allows…
–
CVE-2009-3571
Unspecified vulnerability in OpenOffice.org (OOo) has unknown impact and client-side attack vector, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, aka…
–
CVE-2009-3570
Unspecified vulnerability in OpenOffice.org (OOo) has unspecified impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.9
–
CVE-2009-0201
Heap-based buffer overflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via unspecified records…