NVD

Id
50168  
Name
CVE-2009-2949  
Description
Integer overflow in the XPMReader::ReadXPM function in filter.vcl/ixpm/svt_xpmread.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to execute arbitrary code via a crafted XPM file that triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2010-02-16  
Modified Date
2014-11-13  
Seq
2009-2949  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
253918 50168 CVE-2009-2949 SUSE-SA:2010:017  View
253919 50168 CVE-2009-2949 oval:org.mitre.oval:def:10176  View
253920 50168 CVE-2009-2949 1023591  View
253921 50168 CVE-2009-2949 DSA-1995  View
253922 50168 CVE-2009-2949 GLSA-201408-19  View
253923 50168 CVE-2009-2949 MDVSA-2010:221  View
253924 50168 CVE-2009-2949 http://www.openoffice.org/security/bulletin.html  View
253925 50168 CVE-2009-2949 http://www.openoffice.org/security/cves/CVE-2009-2949.html  View
253926 50168 CVE-2009-2949 http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html  View
253927 50168 CVE-2009-2949 RHSA-2010:0101  View
253928 50168 CVE-2009-2949 38218  View
253929 50168 CVE-2009-2949 USN-903-1  View
253930 50168 CVE-2009-2949 TA10-287A  View
253931 50168 CVE-2009-2949 ADV-2010-0366  View
253932 50168 CVE-2009-2949 ADV-2010-0635  View
253933 50168 CVE-2009-2949 ADV-2010-2905  View
253934 50168 CVE-2009-2949 openoffice-xpm-bo(56236)  View
253935 50168 CVE-2009-2949 https://bugzilla.redhat.com/show_bug.cgi?id=527540  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35342 JVNDB-2010-001122 OpenOffice.org の XPMReader::ReadXPM 関数における整数オーバーフローの脆弱性 OpenOffice.org の XPMReader::ReadXPM 関数には、任意のコードを実行される脆弱性が存在します。 CVE-2009-2949 40380 CVE-2009-2949 50168 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001122.html 2010-02-12 2010-03-05 View