Detections
Analytics
OpenOffice < 2.4.2 WMF and EMF File Handling Buffer Overflows
high Nessus Plugin ID 34510
Synopsis
The remote Windows host has a program affected by multiple buffer overflows.Description
The version of OpenOffice 2.x installed on the remote host is earlier than 2.4.2. Such versions are affected by several issues :- Specially crafted WMF files can lead to heap-based overflows and arbitrary code execution (CVE-2008-2237).
- Specially crafted EMF files can lead to heap-based overflows and arbitrary code execution (CVE-2008-2238).
Solution
Upgrade to OpenOffice version 2.4.2 or later.See Also
Plugin Details
Severity: High
ID: 34510
File Name: openoffice_242.nasl
Version: 1.11
Type: local
Agent: windows
Family: Windows
Published: 10/29/2008
Updated: 7/16/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:sun:openoffice.org
Required KB Items: SMB/OpenOffice/Build
Exploit Ease: No known exploits are available
Reference Information
CVE: CVE-2008-2237, CVE-2008-2238
BID: 31962