CVE-2008-3282

CWE-6815 documents5 sources
Severity
7.8HIGH
EPSS
0.6%
top 29.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apache OpenofficeFedoraproject Fedora
Timeline
PublishedAug 29
Latest updateMay 1

Description

Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document, related to a "numeric truncation error," a different vulnerability than CVE-2008-2152.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

Also affects: Fedora 8, 9

🔴Vulnerability Details

2
GHSA
GHSA-jvw4-xfqp-q5qh: Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global↗2022-05-01
▶
CVEList
CVE-2008-3282: Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global↗2008-08-29
▶

📋Vendor Advisories

1
Red Hat
openoffice.org: numeric truncation error in memory allocator (64bit)↗2008-08-27
▶

💬Community

1
Bugzilla
CVE-2008-3282 openoffice.org: numeric truncation error in memory allocator (64bit)↗2008-08-06
▶
CVE-2008-3282 (HIGH CVSS 7.8) | Integer overflow in the rtl_allocat | cvebase.io