CVE-2009-3302

filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute…

published February 16, 2010

CVSS
—
EPSS
12%
Percentile
96.1
In the wild
Unconfirmed
What it is

⚠️ A crafted Word document can spell disaster for your OpenOffice! This flaw lets attackers crash the app or even execute arbitrary code—yikes! Think of it like a waiter serving a dish that's been tampered with. If the waiter doesn’t recognize the changes to the recipe, they might accidentally serve a plate that causes a food fight! 🍽️ An attacker can exploit this vulnerability to crash OpenOffice, causing disruptions in your workflow or, worse, execute malicious code that could compromise your system. This denial of service could leave you locked out at a critical moment—absolutely devastating!

Put simply

Think of it like a waiter serving a dish that's been tampered with. If the waiter doesn’t recognize the changes to the recipe, they might accidentally serve a plate that causes a food fight! 🍽️ The issue resides in the handling of the sprmTSetBrc table property modifier in OpenOffice.org before version 3.2. It leads to a boundary error that can be exploited to crash the application or execute arbitrary code.

What to do

An attacker can exploit this vulnerability to crash OpenOffice, causing disruptions in your workflow or, worse, execute malicious code that could compromise your system. This denial of service could leave you locked out at a critical moment—absolutely devastating! Upgrade OpenOffice.org to version 3.2 or later to close this vulnerability. Additionally, be cautious with any Word documents from untrusted sources. Regularly review your software for updates to keep your defenses strong. You've got this! Stay proactive and keep your OpenOffice secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.11688 · 96.1th percentile
Published
2010-02-16T19:00Z
EPSS history
Timeline
  • 16 FEB 19:00Z
    filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute…
    cvelistv5