Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document, related to a "numeric truncation error," a different vulnerability than CVE-2008-2152.

A numeric truncation error was found in the OpenOffice.org memory allocator. If a carefully crafted file was opened by a victim, an attacker could use this flaw to crash OpenOffice.org or, possibly, execute arbitrary code. (CVE-2008-3282)

Updated openoffice.org packages that fix a security issue are now available for Red Hat Enterprise Linux 5.

This update has been rated as having important security impact by the Red Hat Security Response Team.

OpenOffice.org is an office productivity suite that includes desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor, and a drawing program.

A numeric truncation error was found in the OpenOffice.org memory allocator. If a carefully crafted file was opened by a victim, an attacker could use this flaw to crash OpenOffice.org or, possibly, execute arbitrary code. (CVE-2008-3282)

All users of openoffice.org are advised to upgrade to these updated packages, which contain a backported patch to correct this issue.

Resolves: CVE-2008-3282 numeric truncation error in 64bit OOo memory allocator An update to OpenOffice.org primarily to provide Serbian translations and support. Additional outstanding fixes for some crashes are provided as well.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Resolves: CVE-2008-3282 numeric truncation error in 64bit OOo memory allocator

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
60469	Scientific Linux Security Update : openoffice.org on SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	high
43706	CentOS 5 : openoffice.org (CESA-2008:0835)	Nessus	CentOS Local Security Checks	high
34143	Fedora 9 : openoffice.org-2.4.1-17.6.fc9 (2008-7680)	Nessus	Fedora Local Security Checks	high
34134	Fedora 8 : openoffice.org-2.3.0-6.16.fc8 (2008-7531)	Nessus	Fedora Local Security Checks	high
34058	RHEL 5 : openoffice.org (RHSA-2008:0835)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2008-3282

high

Tenable Plugins

high

high

high

high

high