CVE-2008-2152 : Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc

Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in OpenOffice.org (OOo) 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow.

Published 2008-06-10 18:32:00

Updated 2025-04-09 00:30:58

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute code

Products affected by CVE-2008-2152

Openoffice » Openoffice.org » Version: 2.1
cpe:2.3:a:openoffice:openoffice.org:2.1:*:*:*:*:*:*:*
Matching versions
Openoffice » Openoffice.org » Version: 2.2
cpe:2.3:a:openoffice:openoffice.org:2.2:*:*:*:*:*:*:*
Matching versions
Openoffice » Openoffice.org » Version: 2.3
cpe:2.3:a:openoffice:openoffice.org:2.3:*:*:*:*:*:*:*
Matching versions
Openoffice » Openoffice.org » Version: 2.4
cpe:2.3:a:openoffice:openoffice.org:2.4:*:*:*:*:*:*:*
Matching versions
Openoffice » Openoffice.org » Version: 2.0
cpe:2.3:a:openoffice:openoffice.org:2.0:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2008-2152

EPSS FAQ

3.99%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 87 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2008-2152

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2008-2152

CWE-189

Assigned by: nvd@nist.gov (Primary)

References for CVE-2008-2152

Jump to

Vulnerability Details : CVE-2008-2152

Products affected by CVE-2008-2152

Exploit prediction scoring system (EPSS) score for CVE-2008-2152

CVSS scores for CVE-2008-2152

CWE ids for CVE-2008-2152

References for CVE-2008-2152