CVE-2009-2139
Fixed in a distro release EPSS 6%
Heap-based buffer overflow in svtools/source/filter.vcl/wmf/enhwmf.cxx in Go-oo 2.x and 3.x before 3.0.1, previously named ooo-build and related to OpenOffice.org (OOo), allows remote attackers to execute arbitrary code via a crafted EMF file, a similar issue to CVE-2008-2238.
Products: sun openoffice.org
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 4.0 | openoffice.org | 2.0.4.dfsg.2-7etch7 |
| Debian 5.0 | openoffice.org | 1:2.4.1+dfsg-1+lenny3 |