CVE-2008-2152: openoffice openoffice.org Numeric Errors

CVSS: 9.3v2.0HighModified

AliasesRHSA-2008:0537

Published 10-06-2008Last modified 07-08-2024

Vulnerability summary

CVE-2008-2152 is a high (CVSS 9.3) Numeric Errors vulnerability in openoffice openoffice.org. EPSS estimates a 5.75% chance of exploitation in the next 30 days, higher than 92.9% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

5.75%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1

RHSA-2008:0538

Timeline

10-06-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in OpenOffice.org (OOo) 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

5.75%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

0.00 pp

From 5.75% on 19-09-2026

19-09-202619-10-2026

EPSS score

5.75%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-189Numeric ErrorsWeaknesses in this category are related to improper calculation or conversion of numbers.

Affected systems

Redhat138 products

openoffice.org< 1:2.3.0-6.5.1.el5_2
openoffice.org-base< 1:2.3.0-6.5.1.el5_2
openoffice.org-calc< 1:2.3.0-6.5.1.el5_2
openoffice.org-core< 1:2.3.0-6.5.1.el5_2
openoffice.org-debuginfo< 1:2.3.0-6.5.1.el5_2

openoffice.org-draw< 1:2.3.0-6.5.1.el5_2
openoffice.org-emailmerge< 1:2.3.0-6.5.1.el5_2
openoffice.org-graphicfilter< 1:2.3.0-6.5.1.el5_2
openoffice.org-headless< 1:2.3.0-6.5.1.el5_2
openoffice.org-impress< 1:2.3.0-6.5.1.el5_2
openoffice.org-javafilter< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-af_ZA< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-ar< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-as_IN< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-bg_BG< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-bn< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-ca_ES< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-cs_CZ< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-cy_GB< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-da_DK< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-de< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-el_GR< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-es< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-et_EE< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-eu_ES< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-fi_FI< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-fr< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-ga_IE< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-gl_ES< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-gu_IN< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-he_IL< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-hi_IN< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-hr_HR< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-hu_HU< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-it< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-ja_JP< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-kn_IN< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-ko_KR< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-lt_LT< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-ml_IN< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-mr_IN< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-ms_MY< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-nb_NO< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-nl< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-nn_NO< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-nr_ZA< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-nso_ZA< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-or_IN< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-pa_IN< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-pl_PL< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-pt_BR< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-pt_PT< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-ru< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-sk_SK< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-sl_SI< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-sr_CS< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-ss_ZA< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-st_ZA< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-sv< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-ta_IN< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-te_IN< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-th_TH< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-tn_ZA< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-tr_TR< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-ts_ZA< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-ur< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-ve_ZA< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-xh_ZA< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-zh_CN< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-zh_TW< 1:2.3.0-6.5.1.el5_2
openoffice.org-langpack-zu_ZA< 1:2.3.0-6.5.1.el5_2
openoffice.org-math< 1:2.3.0-6.5.1.el5_2
openoffice.org-pyuno< 1:2.3.0-6.5.1.el5_2
openoffice.org-sdk< 1:2.3.0-6.5.1.el5_2
openoffice.org-sdk-doc< 1:2.3.0-6.5.1.el5_2
openoffice.org-testtools< 1:2.3.0-6.5.1.el5_2
openoffice.org-writer< 1:2.3.0-6.5.1.el5_2
openoffice.org-xsltfilter< 1:2.3.0-6.5.1.el5_2
openoffice.org2< 1:2.0.4-5.7.0.5.0
openoffice.org2-base< 1:2.0.4-5.7.0.5.0
openoffice.org2-calc< 1:2.0.4-5.7.0.5.0
openoffice.org2-core< 1:2.0.4-5.7.0.5.0
openoffice.org2-debuginfo< 1:2.0.4-5.7.0.5.0
openoffice.org2-draw< 1:2.0.4-5.7.0.5.0
openoffice.org2-emailmerge< 1:2.0.4-5.7.0.5.0
openoffice.org2-graphicfilter< 1:2.0.4-5.7.0.5.0
openoffice.org2-impress< 1:2.0.4-5.7.0.5.0
openoffice.org2-javafilter< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-af_ZA< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-ar< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-bg_BG< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-bn< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-ca_ES< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-cs_CZ< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-cy_GB< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-da_DK< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-de< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-el_GR< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-es< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-et_EE< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-eu_ES< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-fi_FI< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-fr< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-ga_IE< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-gl_ES< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-gu_IN< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-he_IL< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-hi_IN< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-hr_HR< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-hu_HU< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-it< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-ja_JP< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-ko_KR< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-lt_LT< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-ms_MY< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-nb_NO< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-nl< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-nn_NO< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-pa_IN< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-pl_PL< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-pt_BR< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-pt_PT< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-ru< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-sk_SK< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-sl_SI< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-sr_CS< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-sv< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-ta_IN< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-th_TH< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-tr_TR< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-zh_CN< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-zh_TW< 1:2.0.4-5.7.0.5.0
openoffice.org2-langpack-zu_ZA< 1:2.0.4-5.7.0.5.0
openoffice.org2-math< 1:2.0.4-5.7.0.5.0
openoffice.org2-pyuno< 1:2.0.4-5.7.0.5.0
openoffice.org2-testtools< 1:2.0.4-5.7.0.5.0
openoffice.org2-writer< 1:2.0.4-5.7.0.5.0
openoffice.org2-xsltfilter< 1:2.0.4-5.7.0.5.0

Show all 138

Openoffice1 product

openoffice.org2.0 | 2.1 | 2.2 | 2.3 | 2.4

2 vendors · 139 products

References

29 links

secunia.com/advisories/30635Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2008-0537.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/30633Third Party AdvisoryX Refsource SECUNIA
sunsolve.sun.com/search/document.do?assetkey=1-26-237944-1Vendor AdvisoryX Refsource SUNALERT
www.redhat.com/archives/fedora-package-announce/2008-June/msg00385.htmlVendor AdvisoryX Refsource FEDORA
www.securitytracker.com/id?1020219VDB EntryX Refsource SECTRACK
www.redhat.com/archives/fedora-package-announce/2008-June/msg00499.htmlVendor AdvisoryX Refsource FEDORA
security.gentoo.org/glsa/glsa-200807-05.xmlVendor AdvisoryX Refsource GENTOO
www.vupen.com/english/advisories/2008/1804/referencesVDB EntryX Refsource VUPEN
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9787VDB EntrySignatureX Refsource OVAL

Show all 29 references

www.mandriva.com/security/advisories?name=MDVSA-2008:138Vendor AdvisoryX Refsource MANDRIVA
www.openoffice.org/security/cves/CVE-2008-2152.htmlX Refsource CONFIRM
www.redhat.com/support/errata/RHSA-2008-0538.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/30634Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/30599Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/archives/fedora-package-announce/2008-June/msg00473.htmlVendor AdvisoryX Refsource FEDORA
labs.idefense.com/intelligence/vulnerabilities/display.php?id=714Third Party AdvisoryX Refsource IDEFENSE
exchange.xforce.ibmcloud.com/vulnerabilities/42957VDB EntryX Refsource XF
www.vupen.com/english/advisories/2008/1773VDB EntryX Refsource VUPEN
www.securityfocus.com/bid/29622VDB EntryX Refsource BID
secunia.com/advisories/31029Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDVSA-2008:137Vendor AdvisoryX Refsource MANDRIVA
access.redhat.com/errata/RHSA-2008:0537Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=450518REPORT
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0537.jsonAdvisory
access.redhat.com/security/cve/CVE-2008-2152REPORT
www.cve.org/CVERecord?id=CVE-2008-2152Advisory
nvd.nist.gov/vuln/detail/CVE-2008-2152Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities