Multiple directory traversal vulnerabilities in OpenOffice.org 2.x and 3.x before 3.3| ID: oval:org.secpod.oval:def:215 | Date: (C)2011-02-25 (M)2022-10-10 |
| Class: VULNERABILITY | Family: windows |
The host is installed with OpenOffice.org 2.x and 3.x before 3.3 and is prone to multiple directory traversal vulnerabilities. The flaws are present in the application, which fails to handle zip/jar package extraction. Successful exploitation may lead to overwriting files when relative file locations point to locations outside the root of the destination folder.
| Platform: |
| Microsoft Windows 11 |
| Microsoft Windows Server 2022 |
| Microsoft Windows Server 2019 |
| Microsoft Windows Server 2016 |
| Microsoft Windows 2000 |
| Microsoft Windows 7 |
| Microsoft Windows Server 2003 |
| Microsoft Windows Server 2008 |
| Microsoft Windows Server 2008 R2 |
| Microsoft Windows Vista |
| Microsoft Windows XP |
| Microsoft Windows 8 |
| Microsoft Windows Server 2012 |
| Microsoft Windows 8.1 |
| Microsoft Windows 10 |
| Microsoft Windows Server 2012 R2 |
