Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document, related to a numeric truncation error, a different vulnerability than CVE-2008-2152.
When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openoffice | Apache | 2.4.1 (including) | 2.4.1 (including) |
| Red Hat Enterprise Linux 5 | RedHat | openoffice.org-1:2.3.0-6.5.2.el5_2 | * |