CVE ID:	CVE-2009-2949
Description:	Integer overflow in the XPMReader::ReadXPM function in filter.vcl/ixpm/svt_xpmread.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to execute arbitrary code via a crafted XPM file that triggers a heap-based buffer overflow.
Test IDs:	1.3.6.1.4.1.25623.1.1.1.1.2010.1995
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2949 BugTraq ID: 38218 http://www.securityfocus.com/bid/38218 Cert/CC Advisory: TA10-287A http://www.us-cert.gov/cas/techalerts/TA10-287A.html Debian Security Information: DSA-1995 (Google Search) http://www.debian.org/security/2010/dsa-1995 http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml http://www.mandriva.com/security/advisories?name=MDVSA-2010:221 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10176 RedHat Security Advisories: RHSA-2010:0101 http://www.redhat.com/support/errata/RHSA-2010-0101.html http://securitytracker.com/id?1023591 http://secunia.com/advisories/38567 http://secunia.com/advisories/38568 http://secunia.com/advisories/38695 http://secunia.com/advisories/38921 http://secunia.com/advisories/41818 http://secunia.com/advisories/60799 SuSE Security Announcement: SUSE-SA:2010:017 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html http://www.ubuntu.com/usn/USN-903-1 http://www.vupen.com/english/advisories/2010/0366 http://www.vupen.com/english/advisories/2010/0635 http://www.vupen.com/english/advisories/2010/2905 XForce ISS Database: openoffice-xpm-bo(56236) https://exchange.xforce.ibmcloud.com/vulnerabilities/56236