CVE-2008-3282: apache openoffice

Vulnerability summary

CVE-2008-3282 is a high (CVSS 9.3) vulnerability in apache openoffice. EPSS estimates a 10.76% chance of exploitation in the next 30 days, higher than 95.7% of scored vulnerabilities.

Timeline

1. 29-08-2008
   PublishedVulnerability first disclosed.
2. 17-01-2025
   Last modifiedVulnerability information updated.

Description

Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document, related to a "numeric truncation error," a different vulnerability than CVE-2008-2152.

• CWE-681Incorrect Conversion between Numeric TypesWhen converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.