PT-2010-1162 · Oracle+2 · Openoffice.Org+2
Jan Lieskovsky
·
Publicado
2010-08-23
·
Atualizado
2024-06-15
·
CVE-2010-2936
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
OpenOffice.org versions 2.x through 3.x before 3.3
Description
The issue is related to an integer overflow in the Impress module, which can be triggered by crafted polygons in a PowerPoint document. This can lead to a denial of service, causing the application to crash, or possibly allow the execution of arbitrary code. The vulnerability can also be exploited to access confidential data, compromise its integrity, and disrupt service.
Recommendations
For versions 2.x through 3.x before 3.3, update to version 3.3 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted polygons in PowerPoint documents to minimize the risk of exploitation. Restrict access to untrusted documents to prevent potential attacks.
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Openoffice
Openoffice.Org
Red Hat