CVE-2009-3301

Integer underflow in filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or…

published February 16, 2010

CVSS
—
EPSS
12%
Percentile
96.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky integer underflow is hiding in OpenOffice.org that can crash your application! Think of it like a bridge that was engineered without considering a few crucial support beams — when too many trucks (or a crafted Word document!) pass over at once, it collapses under pressure. This vulnerability lets attackers send a malformed table property that could spell disaster for your software stability. An attacker could crash OpenOffice or, even worse, potentially execute arbitrary code. Imagine someone manipulating your office tools to run their own nefarious code — a serious disruption to your workflow!

Put simply

Think of it like a bridge that was engineered without considering a few crucial support beams — when too many trucks (or a crafted Word document!) pass over at once, it collapses under pressure. This vulnerability lets attackers send a malformed table property that could spell disaster for your software stability. This integer underflow vulnerability in OpenOffice.org versions before 3.2 occurs in the ww8par2.cxx file, allowing crafted sprmTDefTable table property modifiers to trigger a denial of service or arbitrary code execution.

What to do

An attacker could crash OpenOffice or, even worse, potentially execute arbitrary code. Imagine someone manipulating your office tools to run their own nefarious code — a serious disruption to your workflow! Upgrade OpenOffice.org to version 3.2 or later to close this vulnerability. Additionally, review and ensure any incoming documents are from trusted sources to mitigate risks until you can patch. Stay vigilant! You've got this! By updating your software, you’re taking the right steps to keep your applications safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.11997 · 96.1th percentile
Published
2010-02-16T19:00Z
EPSS history
Timeline
  • 16 FEB 19:00Z
    Integer underflow in filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or…
    cvelistv5