Severity: : Critical
  CVE Kennungen: : CVE-2009-3302
  Advisory Date: 21 lipca 2015

  DESCRIPTION

filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted sprmTSetBrc table property modifier in a Word document, related to a "boundary error flaw."

  INFORMATION EXPOSURE

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1004024
  Trend Micro Deep Security DPI Rule Name: 1004024 - OpenOffice.org Microsoft Word File sprmTSetBrc Processing Buffer Overflow

  AFFECTED SOFTWARE AND VERSION:

  • sun openoffice.org 1.1.0
  • sun openoffice.org 2.0.0
  • sun openoffice.org 2.0.3
  • sun openoffice.org 2.1.0
  • sun openoffice.org 2.2.0
  • sun openoffice.org 2.2.1
  • sun openoffice.org 2.3.0
  • sun openoffice.org 2.3.1
  • sun openoffice.org 2.4.0
  • sun openoffice.org 2.4.1
  • sun openoffice.org 2.4.2
  • sun openoffice.org 2.4.3
  • sun openoffice.org 3.0.0
  • sun openoffice.org 3.0.1
  • sun openoffice.org 3.1.0
  • sun openoffice.org 3.1.1