← Database

CVE-2009-2949

CRITICAL CVSS: 9.3 Published: 2010-02-16 Modified: 2026-06-16

Description

Integer overflow in the XPMReader::ReadXPM function in filter.vcl/ixpm/svt_xpmread.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to execute arbitrary code via a crafted XPM file that triggers a heap-based buffer overflow.

Affected Platforms

Debian Debian LinuxApache OpenofficeCanonical Ubuntu Linux

Weakness Type

CWE-190

References