Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3g32-62rm-7wvw

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

OpenOffice.org (OOo) before 2.1.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.

OpenOffice.org (OOo) before 2.1.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.

EPSS

Процентиль: 78%
0.01893
Низкий

Дефекты

CWE-94

Связанные уязвимости

ubuntu
около 18 лет назад

OpenOffice.org (OOo) before 2.1.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.

nvd
около 18 лет назад

OpenOffice.org (OOo) before 2.1.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.

debian
около 18 лет назад

OpenOffice.org (OOo) before 2.1.0 does not properly verify the authent ...

EPSS

Процентиль: 78%
0.01893
Низкий

Дефекты

CWE-94