CVE-2008-3282

openoffice.org: numeric truncation error in memory allocator (64bit)

Published Aug 29, 2008 CVSS 3.1 · 7.8 High EPSS 10.8% KEV · Not listed
Description
Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document, related to a "numeric truncation error," a different vulnerability than CVE-2008-2152.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Jan 17, 2025, 3:19 PM
Reserved
Jul 24, 2008, 12:00 AM
Status
Modified
Published
Aug 29, 2008, 6:41 PM
Modified
Jun 16, 2026, 10:55 PM
Severity
Important
Public date
Aug 27, 2008, 12:00 AM