Detections
Analytics
OpenOffice < 3.1.1 Multiple Buffer Overflows
high Nessus Plugin ID 40826
Synopsis
The remote Windows host has a program affected by multiple buffer overflows.Description
The version of OpenOffice installed on the remote host is earlier than 3.1.1. Such versions are affected by several issues :- Parsing certain records in a document table could lead to heap-based overflows and arbitrary code execution. (CVE-2009-0200)
- Parsing certain records in specially crafted files could lead to heap-based overflows and arbitrary code execution. (CVE-2009-0201)
Solution
Upgrade to OpenOffice version 3.1.1 or later.See Also
https://secuniaresearch.flexerasoftware.com/secunia_research/2009-26
https://secuniaresearch.flexerasoftware.com/secunia_research/2009-27
Plugin Details
Severity: High
ID: 40826
File Name: openoffice_311.nasl
Version: 1.12
Type: local
Agent: windows
Family: Windows
Published: 9/1/2009
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:sun:openoffice.org
Required KB Items: SMB/OpenOffice/Build
Exploit Ease: No known exploits are available
Patch Publication Date: 8/31/2009
Vulnerability Publication Date: 9/1/2009
Reference Information
CVE: CVE-2009-0200, CVE-2009-0201
BID: 36200