CVE-2009-0259

EPSS 7.5%

The Word processor in OpenOffice.org 1.1.2 through 1.1.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) .doc, (2) .wri, or (3) .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008, as demonstrated by 2008-crash.doc.rar, and a similar issue to CVE-2008-4841.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/6560unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://milw0rm.com/sploits/2008-crash.doc.rar https://exchange.xforce.ibmcloud.com/vulnerabilities/48213 https://www.exploit-db.com/exploits/6560 http://www.openwall.com/lists/oss-security/2009/01/21/9 http://www.securityfocus.com/bid/33383