CVE-2008-2152: Buffer Overflow
Integer overflow in the rtlallocateMemory function in sal/rtl/source/allocglobal.c in OpenOffice.org (OOo) 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2152?
CVE-2008-2152 has been classified as a critical severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2008-2152?
To address CVE-2008-2152, users should upgrade to the latest version of Apache OpenOffice that contains the necessary security patches.
Which versions of OpenOffice.org are affected by CVE-2008-2152?
CVE-2008-2152 affects OpenOffice.org versions 2.0, 2.1, 2.2, 2.3, and 2.4.
Can CVE-2008-2152 be exploited remotely?
Yes, CVE-2008-2152 can be exploited remotely through specially crafted files that trigger the vulnerability.
What type of vulnerability is CVE-2008-2152?
CVE-2008-2152 is an integer overflow vulnerability that leads to a heap-based buffer overflow.