CVE-2009-2950: Buffer Overflow
Heap-based buffer overflow in the GIFLZWDecompressor::GIFLZWDecompressor function in filter.vcl/lgif/decode.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file, related to LZW decompression.
Other sources
It was reported that it was possible to trigger a heap overflow leading to heap memory corruption in the way that OpenOffice.org parsed GIF files. This is not restricted to GIF files alone, but to embedded GIF files in OpenOffice.org documents. The bug is found in GIFLZWDecompressor::GIFLZWDecompressor (source/filter.vcl/lgif/decode.cxx) and is triggered during LZW decompression of GIF file content.
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2950?
CVE-2009-2950 has a severity level that indicates a potential denial of service or arbitrary code execution risk.
How do I fix CVE-2009-2950?
To fix CVE-2009-2950, update to the patched versions of OpenOffice.org specified in the vulnerability details.
What versions are affected by CVE-2009-2950?
Versions of OpenOffice.org prior to 3.2, including specific Red Hat and Debian versions, are affected by CVE-2009-2950.
What can attackers achieve by exploiting CVE-2009-2950?
By exploiting CVE-2009-2950, attackers can potentially crash the application or execute arbitrary code.
What type of attack does CVE-2009-2950 facilitate?
CVE-2009-2950 facilitates a heap-based buffer overflow attack via crafted GIF files.