Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3g32-62rm-7wvw

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

OpenOffice.org (OOo) before 2.1.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.

OpenOffice.org (OOo) before 2.1.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.

EPSS

Процентиль: 73%
0.00779
Низкий

Дефекты

CWE-94

Связанные уязвимости

ubuntu
больше 17 лет назад

OpenOffice.org (OOo) before 2.1.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.

nvd
больше 17 лет назад

OpenOffice.org (OOo) before 2.1.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.

debian
больше 17 лет назад

OpenOffice.org (OOo) before 2.1.0 does not properly verify the authent ...

EPSS

Процентиль: 73%
0.00779
Низкий

Дефекты

CWE-94