OpenOffice.EMF.File.EMR_BITBLT.Record.Integer.Overflow

description-logoDescription

This indicates an attack attempt against an integer-overflow vulnerability in OpenOffice.org.
The vulnerability is caused by the way OpenOffice parses EMF images. A remote attacker may exploit this vulnerability by enticing a user to open a malformed EMF file, causing a denial-of-service condition or execution of arbitrary code.

affected-products-logoAffected Products

OpenOffice.org 2.0.3
OpenOffice.org 2.1
OpenOffice.org 2.2
OpenOffice.org 2.2.1
OpenOffice.org 2.3
OpenOffice.org 2.3.1

Impact logoImpact

System Compromise

recomended-action-logoRecommended Actions

Upgrade to the latest version of OpenOffice.org (2.4 or later):
http://download.openoffice.org/.

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)