CVE-2009-0200

Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted…

published September 2, 2009

CVSS
—
EPSS
7%
Percentile
93.9
In the wild
Unconfirmed
What it is

⚠️ An integer underflow in OpenOffice.org could let a crafty attacker execute arbitrary code with just a malicious document! 📄 Think of this as a coffee shop where the barista miscalculates the amount of coffee beans needed for a drink — one wrong number could lead to overflowing cups and spilled coffee everywhere! In the wrong hands, this vulnerability could allow an attacker to take control of your system, executing malicious code that could compromise your data or privacy. It's like letting someone behind the counter at that coffee shop; they can brew up all sorts of trouble!

Put simply

Think of this as a coffee shop where the barista miscalculates the amount of coffee beans needed for a drink — one wrong number could lead to overflowing cups and spilled coffee everywhere! This integer underflow vulnerability in OpenOffice.org versions before 3.1.1 allows remote attackers to exploit crafted records in the document table, leading to a heap-based buffer overflow.

What to do

In the wrong hands, this vulnerability could allow an attacker to take control of your system, executing malicious code that could compromise your data or privacy. It's like letting someone behind the counter at that coffee shop; they can brew up all sorts of trouble! To protect yourself, upgrade to OpenOffice.org version 3.1.1 or later and ensure that any StarOffice/StarSuite installations are updated to the latest available versions. Don't forget to educate users about the risks of opening untrusted documents! You've got this! Stay vigilant, update your software, and you'll keep those virtual coffee spills at bay. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06722 · 93.9th percentile
Published
2009-09-02T17:00Z
EPSS history
Timeline
  • 02 SEP 17:00Z
    Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted…
    cvelistv5