CVE-2005-0941
Published May 2, 2005
Last updated 7 years ago
Overview
- Description
- The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5.1
- Impact score
- 6.4
- Exploitability score
- 4.9
- Vector string
- AV:N/AC:H/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:openoffice:openoffice:1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E887F99-5A89-432D-986C-3E49E5DFACBE"
},
{
"criteria": "cpe:2.3:a:openoffice:openoffice:1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02D2906A-69FE-4A13-B474-A84725E60220"
},
{
"criteria": "cpe:2.3:a:openoffice:openoffice:1.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73EA7C32-30D8-4367-B2F6-6394408E63B4"
},
{
"criteria": "cpe:2.3:a:openoffice:openoffice:1.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A063FBBE-4D34-45D0-9AC8-66CFC64D22EA"
},
{
"criteria": "cpe:2.3:a:openoffice:openoffice:1.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F0436BF-D4B6-4437-A509-FEBB779E4B3A"
},
{
"criteria": "cpe:2.3:a:openoffice:openoffice:1.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E24B3240-5110-4810-A37A-C9A0B4A1F856"
},
{
"criteria": "cpe:2.3:a:openoffice:openoffice:1.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D14968CA-8FA9-4E71-9C0C-3ABFBE7920C1"
}
],
"operator": "OR"
}
]
}
]