CVE-2008-0320

CRITICAL 9.3CVE-2008-0320 · Published 17/04/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
openoffice.org openoffice	`= 2.0.3= 2.1= 2.2= 2.2.1= 2.3≤ 2.3.1`	No fix yet

Description

Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream.

References

labs.idefense.com/intelligence/vulnerabilities/display.php
secunia.com/advisories/29844 · Vendor Advisory
secunia.com/advisories/29852 · Vendor Advisory
secunia.com/advisories/29864 · Vendor Advisory
secunia.com/advisories/29871 · Vendor Advisory
secunia.com/advisories/29910 · Vendor Advisory
secunia.com/advisories/29913 · Vendor Advisory
secunia.com/advisories/29987 · Vendor Advisory
secunia.com/advisories/30100 · Vendor Advisory
secunia.com/advisories/30179 · Vendor Advisory
security.gentoo.org/glsa/glsa-200805-16.xml
sunsolve.sun.com/search/document.do
debian.org/security/2008/dsa-1547
mandriva.com/security/advisories
mandriva.com/security/advisories
novell.com/linux/security/advisories/2008_23_openoffice.html
openoffice.org/security/bulletin.html
openoffice.org/security/cves/CVE-2007-4770.html
openoffice.org/security/cves/CVE-2007-5745.html
openoffice.org/security/cves/CVE-2008-0320.html
redhat.com/support/errata/RHSA-2008-0175.html
redhat.com/support/errata/RHSA-2008-0176.html · Vendor Advisory
securityfocus.com/bid/28819
securitytracker.com/id
ubuntu.com/usn/usn-609-1
vupen.com/english/advisories/2008/1253/references · Vendor Advisory
vupen.com/english/advisories/2008/1375/references · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/41860
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10318
redhat.com/archives/fedora-package-announce/2008-April/msg00448.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free