CVE-2009-3569

EUVD-2009-3550

06.10.2009, 20:30

Stack-based buffer overflow in OpenOffice.org (OOo) allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, aka "Client-side stack overflow exploit." NOTE: as of 20091005, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	9.3 UNKNOWN	NETWORK	MEDIUM		AV:N/AC:M/Au:N/C:C/I:C/A:C

Base Score

CVSS 3.x

EPSS Score

Percentile: 88%

Affected Products (NVD)

Vendor	Product	Version
apache	openoffice.org	-

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

libreoffice

dapper	dne
hardy	dne
intrepid	dne
jaunty	dne
karmic	dne
lucid	dne
maverick	dne
natty	ignored

openoffice.org

dapper	ignored
hardy	ignored
intrepid	ignored
jaunty	ignored
karmic	ignored
lucid	ignored
maverick	ignored
natty	not-affected

Common Weakness Enumeration

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

References

http://intevydis.com/vd-list.shtml

http://secunia.com/advisories/35036

http://www.securityfocus.com/bid/36285

http://www.securitytracker.com/id?1022832

http://intevydis.com/vd-list.shtml

http://secunia.com/advisories/35036

http://www.securityfocus.com/bid/36285

http://www.securitytracker.com/id?1022832