Description
Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in OpenOffice.org (OOo) 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | openoffice.org +76 | 1:2.3.0-6.5.1.el5_2 | RHSA-2008:0537 |
| RHEL 4 | openoffice.org +3 | 1.1.5-10.6.0.5.EL4 | RHSA-2008:0538 |
| RHEL 4 | openoffice.org2 +58 | 1:2.0.4-5.7.0.5.0 | RHSA-2008:0537 |
| RHEL 3 | openoffice.org +2 | 1.1.2-42.2.0.EL3 | RHSA-2008:0538 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Productivity 5 | openoffice.org +76 | 1:2.3.0-6.5.1.el5_2 | RHSA-2008:0537 |
Advisories 2
- RHSA-2008:0537 Red Hat Security Advisory: openoffice.org security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2008:0538 Red Hat Security Advisory: openoffice.org security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 30635 third-party-advisory
- RHSA-2008:0537 vendor-advisory
- 30633 third-party-advisory
- 237944 vendor-advisory
- FEDORA-2008-5143 vendor-advisory
- 1020219 vdb-entry
- FEDORA-2008-5247 vendor-advisory
- GLSA-200807-05 vendor-advisory
- ADV-2008-1804 vdb-entry
- oval:org.mitre.oval:def:9787 vdb-entry signature
- MDVSA-2008:138 vendor-advisory
- http://www.openoffice.org/security/cves/CVE-2008-2152.html
- RHSA-2008:0538 vendor-advisory
- 30634 third-party-advisory
- 30599 third-party-advisory
- FEDORA-2008-5239 vendor-advisory
- 20080610 Multiple Vendor OpenOffice rtl_allocateMemory() Integer Overflow Vulnerability third-party-advisory
- openoffice-rtlallocatememory-bo(42957) vdb-entry
- ADV-2008-1773 vdb-entry
- 29622 vdb-entry
- 31029 third-party-advisory
- MDVSA-2008:137 vendor-advisory