Vulnerability Name:

CVE-2009-2950 (CCN-56238)

Assigned:2009-08-23
Published:2010-02-12
Updated:2022-02-07
Summary:Heap-based buffer overflow in the GIFLZWDecompressor::GIFLZWDecompressor function in filter.vcl/lgif/decode.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file, related to LZW decompression.
CVSS v3 Severity:7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
6.8 Medium (REDHAT CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (REDHAT Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-787
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2009-2950

Source: SUSE
Type: Broken Link, Third Party Advisory
SUSE-SA:2010:017

Source: CCN
Type: RHSA-2010-0101
Important: openoffice.org security update

Source: CCN
Type: SA38567
OpenOffice.org 2 Multiple Vulnerabilities

Source: SECUNIA
Type: Broken Link
38567

Source: CCN
Type: SA38568
OpenOffice.org 3 Multiple Vulnerabilities

Source: SECUNIA
Type: Broken Link
38568

Source: SECUNIA
Type: Broken Link
38695

Source: SECUNIA
Type: Broken Link
38921

Source: CCN
Type: SA41818
Oracle Open Office Multiple Vulnerabilities

Source: SECUNIA
Type: Broken Link
41818

Source: SECUNIA
Type: Broken Link
60799

Source: CCN
Type: SECTRACK ID: 1023591
OpenOffice.org Flaws Let Remote Users Execute Arbitrary Code

Source: SECTRACK
Type: Broken Link, Third Party Advisory, VDB Entry
1023591

Source: DEBIAN
Type: Third Party Advisory
DSA-1995

Source: DEBIAN
Type: DSA-1995
openoffice.org -- several vulnerabilities

Source: GENTOO
Type: Third Party Advisory
GLSA-201408-19

Source: MANDRIVA
Type: Broken Link
MDVSA-2010:221

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www.openoffice.org/security/bulletin.html

Source: CCN
Type: OpenOffice Web Site
Security Vulnerability in OpenOffice.org related to GIF file processing

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www.openoffice.org/security/cves/CVE-2009-2950.html

Source: CCN
Type: Oracle Critical Patch Update Advisory - October 2010
Oracle Critical Patch Update Advisory - October 2010

Source: CONFIRM
Type: Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html

Source: REDHAT
Type: Broken Link
RHSA-2010:0101

Source: BID
Type: Broken Link, Third Party Advisory, VDB Entry
38218

Source: CCN
Type: BID-38218
OpenOffice Prior to 3.2 Multiple Remote Code Execution Vulnerabilities

Source: CCN
Type: USN-903-1
OpenOffice.org vulnerabilities

Source: UBUNTU
Type: Third Party Advisory
USN-903-1

Source: CERT
Type: Third Party Advisory, US Government Resource
TA10-287A

Source: VUPEN
Type: Broken Link, Patch
ADV-2010-0366

Source: VUPEN
Type: Broken Link
ADV-2010-0635

Source: VUPEN
Type: Broken Link
ADV-2010-2905

Source: CCN
Type: Red Hat Bugzilla Bug 527512
CVE-2009-2950 openoffice.org: GIF file parsing heap overflow

Source: CONFIRM
Type: Issue Tracking, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=527512

Source: XF
Type: Third Party Advisory, VDB Entry
openoffice-gif-bo(56238)

Source: XF
Type: UNKNOWN
openoffice-gif-bo(56238)

Source: OVAL
Type: Tool Signature
oval:org.mitre.oval:def:11050

Source: SUSE
Type: SUSE-SA:2010:017
OpenOffice.org security update

Vulnerable Configuration:Configuration 1:
  • cpe:/a:apache:openoffice:*:*:*:*:*:*:*:* (Version < 3.2.0)

    • Configuration 2:
  • cpe:/o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
  • OR cpe:/o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*
  • OR cpe:/o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*
  • OR cpe:/o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:4.0:*:*:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:5.0:*:*:*:*:*:*:*

    • Configuration RedHat 1:
  • cpe:/a:redhat:rhel_productivity:5:*:*:*:*:*:*:*

    • Configuration RedHat 2:
  • cpe:/o:redhat:enterprise_linux:4:*:*:*:*:*:*:*

    • Configuration RedHat 3:
  • cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

    • Configuration RedHat 4:
  • cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

    • Configuration RedHat 5:
  • cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

    • Configuration RedHat 6:
  • cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

    • Configuration RedHat 7:
  • cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

    • Configuration RedHat 8:
  • cpe:/o:redhat:enterprise_linux:5::client:*:*:*:*:*

    • Configuration RedHat 9:
  • cpe:/o:redhat:enterprise_linux:5::client_workstation:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20092950
    V
    		CVE-2009-2950
    2017-09-27
    oval:org.mitre.oval:def:13500
    P
    		USN-903-1 -- openoffice.org vulnerabilities
    2014-06-30
    oval:org.mitre.oval:def:12661
    P
    		DSA-1995-1 openoffice.org -- several
    2014-06-23
    oval:org.mitre.oval:def:6910
    P
    		DSA-1995 openoffice.org -- several vulnerabilities
    2014-06-23
    oval:org.mitre.oval:def:22848
    P
    		ELSA-2010:0101: openoffice.org security update (Important)
    2014-05-26
    oval:org.mitre.oval:def:21919
    P
    		RHSA-2010:0101: openoffice.org security update (Important)
    2014-02-24
    oval:org.mitre.oval:def:11050
    V
    		Heap-based buffer overflow in the GIFLZWDecompressor::GIFLZWDecompressor function in filter.vcl/lgif/decode.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file, related to LZW decompression.
    2013-04-29
    oval:com.redhat.rhsa:def:20100101
    P
    		RHSA-2010:0101: openoffice.org security update (Important)
    2010-02-12
    oval:org.debian:def:1995
    V
    		several vulnerabilities
    2010-02-12
    BACK
    apache openoffice *
    canonical ubuntu linux 8.04
    canonical ubuntu linux 8.10
    canonical ubuntu linux 9.04
    canonical ubuntu linux 9.10
    debian debian linux 4.0
    debian debian linux 5.0