CERTA-2008-AVI-443
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité affectant l'allocation de mémoire sur un système 64 bits permet l'exécution de code arbitraire à distance.
Description
La différence de définition du type sal_Size entre une plateforme 32 bits et une plateforme 64 bits entraine une vulnérabilité touchant l'allocation de mémoire sur ces dernières. Elle permet à un utilisateur malveillant de faire exécuter du code arbitraire à un utilisateur via un document malicieusement construit.
Solution
Se référer au bulletin de sécurité 92217 de OpenOffice.org pour l'obtention des correctifs (cf. section Documentation).
La version 2.4.1 sur plateforme 64 bits.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eLa version 2.4.1 sur plateforme 64 bits.\u003c/p\u003e",
"content": "## Description\n\nLa diff\u00e9rence de d\u00e9finition du type sal_Size entre une plateforme 32\nbits et une plateforme 64 bits entraine une vuln\u00e9rabilit\u00e9 touchant\nl\u0027allocation de m\u00e9moire sur ces derni\u00e8res. Elle permet \u00e0 un utilisateur\nmalveillant de faire ex\u00e9cuter du code arbitraire \u00e0 un utilisateur via un\ndocument malicieusement construit.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 92217 de OpenOffice.org pour\nl\u0027obtention des correctifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2008-3282",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3282"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 OpenOffice 92217 du 28 juillet 2008 :",
"url": "http://www.openoffice.org/issues/show_bug.cgi?id=92217"
}
],
"reference": "CERTA-2008-AVI-443",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2008-09-04T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 affectant l\u0027allocation de m\u00e9moire sur un syst\u00e8me 64\nbits permet l\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans OpenOffice.org",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 OpenOffice.org 92217 du 28 juillet 2008",
"url": null
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…