CVE-2008-0320

Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute…

published April 17, 2008

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.1th percentile for exploit probability.

CVSS
—
EPSS
57%
Percentile
99.1
In the wild
Unconfirmed
What it is

⚠️ A crafty OLE file can cause a heap of trouble! This vulnerability in OpenOffice.org allows remote attackers to influence how your software handles certain files, resulting in crashes or worse! Think of this like a restaurant where a dish is served with a surprise ingredient that causes a hiccup in the kitchen — the chefs can’t work properly and might even burn the place down! If exploited, this vulnerability could lead to a denial of service, causing the application to crash unexpectedly. There's also the potential for arbitrary code execution, meaning an attacker could manipulate the system in harmful ways — talk about a bad dinner party!

Put simply

Think of this like a restaurant where a dish is served with a surprise ingredient that causes a hiccup in the kitchen — the chefs can’t work properly and might even burn the place down! This heap-based buffer overflow occurs in the OLE importer of OpenOffice.org versions before 2.4, allowing a crafted DocumentSummaryInformation stream to disrupt normal operations and possibly execute malicious code.

What to do

If exploited, this vulnerability could lead to a denial of service, causing the application to crash unexpectedly. There's also the potential for arbitrary code execution, meaning an attacker could manipulate the system in harmful ways — talk about a bad dinner party! To mitigate this risk, ensure you upgrade to OpenOffice.org version 2.4 or later immediately. Additionally, review any OLE files you download and be cautious about opening documents from untrusted sources. Stay vigilant! This vulnerability is fixable! Follow these steps and you’ll fend off those troublesome OLE files in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.56864 · 99.1th percentile
Published
2008-04-17T17:00Z
EPSS history
Timeline
  • 17 APR 17:00Z
    Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute…
    cvelistv5