CVE-2009-0259

The Word processor in OpenOffice.org 1.1.2 through 1.1.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a…

published January 22, 2009

CVSS
—
EPSS
8%
Percentile
94.5
In the wild
Unconfirmed
What it is

🚨 A seemingly harmless .doc file could cause OpenOffice to crash or even execute rogue code! Think of it like serving a dish that looks delicious but contains a hidden allergen. One bite, and the entire dinner party is in chaos! An attacker could send a corrupted Word file that causes OpenOffice to crash, potentially allowing them to execute arbitrary code if the user's system is compromised. This could lead to data loss or unauthorized access, turning a mundane document into a weapon!

Put simply

Think of it like serving a dish that looks delicious but contains a hidden allergen. One bite, and the entire dinner party is in chaos! This vulnerability exists in OpenOffice.org versions 1.1.2 through 1.1.5, where specially crafted .doc, .wri, or .rtf files can trigger memory corruption, leading to denial of service or remote code execution.

What to do

An attacker could send a corrupted Word file that causes OpenOffice to crash, potentially allowing them to execute arbitrary code if the user's system is compromised. This could lead to data loss or unauthorized access, turning a mundane document into a weapon! To protect yourself, upgrade to a more recent version of OpenOffice that addresses these vulnerabilities. Always be cautious when opening files from unknown sources, especially older document formats. Consider disabling macros as an extra precaution. You've got this! Stay vigilant, patch your software, and you'll keep your systems secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07501 · 94.5th percentile
Published
2009-01-22T23:00Z
EPSS history
Timeline
  • 22 JAN 23:00Z
    The Word processor in OpenOffice.org 1.1.2 through 1.1.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a…
    cvelistv5