ID de Prueba:	1.3.6.1.4.1.25623.1.0.90030
Categoría:	Buffer overflow
Título:	OpenOffice.org <= 2.4.1 Vulnerability - Windows
Resumen:	The remote host is probably affected by the vulnerabilities described in; CVE-2008-2152 or CVE-2008-3282 on 64-bit platform's;; Impact; CVE-2008-2152; Integer overflow in the rtl_allocateMemory function in; sal/rtl/source/alloc_global.c in OpenOffice.org (OOo); 2.0 through 2.4 allows remote attackers to execute; arbitrary code via a crafted file that triggers a; heap-based buffer overflow.; CVE-2008-3282; Integer overflow in the rtl_allocateMemory function; in sal/rtl/source/alloc_global.c in the memory allocator; in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows; remote attackers to cause a denial of service (application; crash) or possibly execute arbitrary code via a crafted; document, related to a 'numeric truncation error, ' a; different vulnerability than CVE-2008-2152.
Descripción:	Summary: The remote host is probably affected by the vulnerabilities described in CVE-2008-2152 or CVE-2008-3282 on 64-bit platform's Impact CVE-2008-2152 Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in OpenOffice.org (OOo) 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow. CVE-2008-3282 Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document, related to a 'numeric truncation error, ' a different vulnerability than CVE-2008-2152. Solution: All OpenOffice.org users should upgrade to the latest version: CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-2152 BugTraq ID: 29622 http://www.securityfocus.com/bid/29622 https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00385.html https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00473.html https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00499.html http://security.gentoo.org/glsa/glsa-200807-05.xml http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=714 http://www.mandriva.com/security/advisories?name=MDVSA-2008:137 http://www.mandriva.com/security/advisories?name=MDVSA-2008:138 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9787 http://www.redhat.com/support/errata/RHSA-2008-0537.html http://www.redhat.com/support/errata/RHSA-2008-0538.html http://www.securitytracker.com/id?1020219 http://secunia.com/advisories/30599 http://secunia.com/advisories/30633 http://secunia.com/advisories/30634 http://secunia.com/advisories/30635 http://secunia.com/advisories/31029 http://sunsolve.sun.com/search/document.do?assetkey=1-26-237944-1 http://www.vupen.com/english/advisories/2008/1773 http://www.vupen.com/english/advisories/2008/1804/references XForce ISS Database: openoffice-rtlallocatememory-bo(42957) https://exchange.xforce.ibmcloud.com/vulnerabilities/42957 Common Vulnerability Exposure (CVE) ID: CVE-2008-3282 1020764 http://securitytracker.com/id?1020764 30866 http://www.securityfocus.com/bid/30866 31640 http://secunia.com/advisories/31640 31646 http://secunia.com/advisories/31646 31778 http://secunia.com/advisories/31778 ADV-2008-2449 http://www.vupen.com/english/advisories/2008/2449 FEDORA-2008-7531 https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00494.html FEDORA-2008-7680 https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00120.html RHSA-2008:0835 http://www.redhat.com/support/errata/RHSA-2008-0835.html http://www.openoffice.org/issues/show_bug.cgi?id=92217 https://bugzilla.redhat.com/show_bug.cgi?id=455867 https://bugzilla.redhat.com/show_bug.cgi?id=458056 openoffice-rtlallocatememory-code-execution(44742) https://exchange.xforce.ibmcloud.com/vulnerabilities/44742 oval:org.mitre.oval:def:11345 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11345
Copyright	Copyright (C) 2008 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.