PT-2010-1161 · Apache+1 · Openoffice.Org+2

Jan Lieskovsky · Publicado 2010-08-23 · Atualizado 2024-06-15 · CVE-2010-2935

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenOffice.org (OOo) versions 2.x through 3.x before 3.3

Description The issue is related to an integer truncation error in the Impress module, specifically in the simpress.bin component. This error occurs when handling integer values associated with dictionary property items, which can lead to a heap-based buffer overflow. As a result, remote attackers can potentially cause a denial of service, such as an application crash, or possibly execute arbitrary code via a crafted PowerPoint document. The vulnerability may also allow attackers to access or modify confidential data.

Recommendations For OpenOffice.org (OOo) versions 2.x through 3.x before 3.3, update to version 3.3 or later to resolve the issue.

Correção

DoS

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

BDU:2020-02894

CVE-2010-2935

DSA-2099-1

OPENSUSE-SU-2024:10006-1

RHSA-2010:0643

RHSA-2010_0643

Produtos afetados

Openoffice

Openoffice.Org

Red Hat

Referências · 55

• http://openoffice.org/security/cves/CVE-2010-2935_CVE-2010-2936.html · Nota
• http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html · Aviso do Fabricante
• http://secunia.com/advisories/42927 · Nota
• https://suse.com/security/cve/CVE-2010-2936 · Nota
• https://suse.com/security/cve/CVE-2014-3575 · Nota
• http://vupen.com/english/advisories/2011/0279 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10006-1 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2010/08/11/4 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12063 · Nota
• https://suse.com/security/cve/CVE-2014-3693 · Nota
• https://suse.com/security/cve/CVE-2015-45513 · Nota
• http://secunia.com/advisories/40775 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-8147 · Nota
• https://suse.com/security/cve/CVE-2014-9093 · Nota