CVE-2008-3282

HIGH Year: 2008
CVSS v3 Score
7.8
High
CVSS v2 Score
9.3
Critical
Weakness Type
CWE-681
View all →

Vulnerability Description

Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document, related to a "numeric truncation error," a different vulnerability than CVE-2008-2152.

Related Vulnerabilities

CVE-2007-4268

HIGH
CVSS:7.8(High)

Integer signedness error in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk message with a negative value, which sa...

CWE-6812007

CVE-2007-4988

HIGH
CVSS:7.8(High)

Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers ...

CWE-6812007

CVE-2017-7308

HIGH
CVSS:7.8(High)

The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service (int...

CWE-6812017

CVE-2019-14563

HIGH
CVSS:7.8(High)

Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.

CWE-6812019

CVE-2021-32461

HIGH
CVSS:7.8(High)

Trend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Integer Truncation Privilege Escalation vulnerability which could allow a local attacker to trigger a buffer ov...

CWE-6812021

CVE-2021-3444

HIGH
CVSS:7.8(High)

The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs co...

CWE-6812021