CVE-2009-2140
Published Sep 21, 2009
Last updated 14 years ago
Overview
- Description
- Multiple heap-based buffer overflows in cppcanvas/source/mtfrenderer/emfplus.cxx in Go-oo 2.x and 3.x before 3.0.1, previously named ooo-build and related to OpenOffice.org (OOo), allow remote attackers to execute arbitrary code via a crafted EMF+ file, a similar issue to CVE-2008-2238.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 9.3
- Impact score
- 10
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-119
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:go-oo:go-oo:2.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E878677-3E1E-4986-884F-20F3D89F87AA"
},
{
"criteria": "cpe:2.3:a:go-oo:go-oo:2.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C3FD1AF-3397-4D17-877D-B4053112F874"
},
{
"criteria": "cpe:2.3:a:go-oo:go-oo:2.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C9505A5-CC6A-44CC-AC59-FF9B767153B4"
},
{
"criteria": "cpe:2.3:a:go-oo:go-oo:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "274B998D-61B2-41FC-9D88-74C2D4EA4401"
}
],
"operator": "OR"
}
]
}
]