NVD

Id
50169  
Name
CVE-2009-2950  
Description
Heap-based buffer overflow in the GIFLZWDecompressor::GIFLZWDecompressor function in filter.vcl/lgif/decode.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file, related to LZW decompression.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2010-02-16  
Modified Date
2014-11-13  
Seq
2009-2950  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
253936 50169 CVE-2009-2950 SUSE-SA:2010:017  View
253937 50169 CVE-2009-2950 oval:org.mitre.oval:def:11050  View
253938 50169 CVE-2009-2950 1023591  View
253939 50169 CVE-2009-2950 DSA-1995  View
253940 50169 CVE-2009-2950 GLSA-201408-19  View
253941 50169 CVE-2009-2950 MDVSA-2010:221  View
253942 50169 CVE-2009-2950 http://www.openoffice.org/security/bulletin.html  View
253943 50169 CVE-2009-2950 http://www.openoffice.org/security/cves/CVE-2009-2950.html  View
253944 50169 CVE-2009-2950 http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html  View
253945 50169 CVE-2009-2950 RHSA-2010:0101  View
253946 50169 CVE-2009-2950 38218  View
253947 50169 CVE-2009-2950 USN-903-1  View
253948 50169 CVE-2009-2950 TA10-287A  View
253949 50169 CVE-2009-2950 ADV-2010-0366  View
253950 50169 CVE-2009-2950 ADV-2010-0635  View
253951 50169 CVE-2009-2950 ADV-2010-2905  View
253952 50169 CVE-2009-2950 openoffice-gif-bo(56238)  View
253953 50169 CVE-2009-2950 https://bugzilla.redhat.com/show_bug.cgi?id=527512  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35343 JVNDB-2010-001123 OpenOffice.org の GIFLZWDecompressor::GIFLZWDecompressor 関数におけるヒープベースのバッファオーバーフローの脆弱性 OpenOffice.org の GIFLZWDecompressor::GIFLZWDecompressor 関数には、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2009-2950 40381 CVE-2009-2950 50169 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001123.html 2010-02-12 2010-03-05 View