CERTA-2008-AVI-443
Vulnerability from certfr_avis
Une vulnérabilité affectant l'allocation de mémoire sur un système 64 bits permet l'exécution de code arbitraire à distance.
Description
La différence de définition du type sal_Size entre une plateforme 32 bits et une plateforme 64 bits entraine une vulnérabilité touchant l'allocation de mémoire sur ces dernières. Elle permet à un utilisateur malveillant de faire exécuter du code arbitraire à un utilisateur via un document malicieusement construit.
Solution
Se référer au bulletin de sécurité 92217 de OpenOffice.org pour l'obtention des correctifs (cf. section Documentation).
La version 2.4.1 sur plateforme 64 bits.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eLa version 2.4.1 sur plateforme 64 bits.\u003c/p\u003e",
"content": "## Description\n\nLa diff\u00e9rence de d\u00e9finition du type sal_Size entre une plateforme 32\nbits et une plateforme 64 bits entraine une vuln\u00e9rabilit\u00e9 touchant\nl\u0027allocation de m\u00e9moire sur ces derni\u00e8res. Elle permet \u00e0 un utilisateur\nmalveillant de faire ex\u00e9cuter du code arbitraire \u00e0 un utilisateur via un\ndocument malicieusement construit.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 92217 de OpenOffice.org pour\nl\u0027obtention des correctifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2008-3282",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3282"
}
],
"initial_release_date": "2008-09-04T00:00:00",
"last_revision_date": "2008-09-04T00:00:00",
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 OpenOffice 92217 du 28 juillet 2008 :",
"url": "http://www.openoffice.org/issues/show_bug.cgi?id=92217"
}
],
"reference": "CERTA-2008-AVI-443",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2008-09-04T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 affectant l\u0027allocation de m\u00e9moire sur un syst\u00e8me 64\nbits permet l\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans OpenOffice.org",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 OpenOffice.org 92217 du 28 juillet 2008",
"url": null
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…