CVE-2009-2949

CRITICAL 9.3CVE-2009-2949 · Published 16/02/2010 · updated 16/06/2026

Package	Affected versions	Patched versions
openoffice apache	`< 3.2.0`	`3.2.0`

Description

Integer overflow in the XPMReader::ReadXPM function in filter.vcl/ixpm/svt_xpmread.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to execute arbitrary code via a crafted XPM file that triggers a heap-based buffer overflow.

References

lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html · Third Party Advisory
secunia.com/advisories/38567 · Broken Link
secunia.com/advisories/38568 · Broken Link
secunia.com/advisories/38695 · Broken Link
secunia.com/advisories/38921 · Broken Link
secunia.com/advisories/41818 · Broken Link
secunia.com/advisories/60799 · Broken Link
securitytracker.com/id · Broken Link
debian.org/security/2010/dsa-1995 · Third Party Advisory
gentoo.org/security/en/glsa/glsa-201408-19.xml · Third Party Advisory
mandriva.com/security/advisories · Broken Link
openoffice.org/security/bulletin.html · Vendor Advisory
openoffice.org/security/cves/CVE-2009-2949.html · Vendor Advisory
oracle.com/technetwork/topics/security/cpuoct2010-175626.html · Third Party Advisory
redhat.com/support/errata/RHSA-2010-0101.html · Broken Link
securityfocus.com/bid/38218 · Broken Link
ubuntu.com/usn/USN-903-1 · Third Party Advisory
us-cert.gov/cas/techalerts/TA10-287A.html · Third Party Advisory
vupen.com/english/advisories/2010/0366 · Broken Link
vupen.com/english/advisories/2010/0635 · Broken Link
vupen.com/english/advisories/2010/2905 · Broken Link
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
exchange.xforce.ibmcloud.com/vulnerabilities/56236 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10176 · Tool Signature

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free