PT-2011-1219 · Apache+1 · Oowriter+3
Dan Rosenberg
·
Publicado
2011-01-28
·
Atualizado
2022-02-07
·
CVE-2010-3451
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
OpenOffice.org (OOo) versions 2.x through 3.x before 3.3
oowriter in OpenOffice.org (OOo) versions 2.x through 3.x before 3.3
Description
The issue is related to a use-after-free error in the oowriter component of OpenOffice.org. This can be exploited by remote attackers to potentially execute arbitrary code or cause a denial of service, such as an application crash, by using malformed tables in an RTF document. The exploitation may allow attackers to access confidential data, compromise data integrity, and disrupt service.
Recommendations
For OpenOffice.org (OOo) versions 2.x through 3.x before 3.3, update to version 3.3 or later to resolve the issue.
For oowriter in OpenOffice.org (OOo) versions 2.x through 3.x before 3.3, update to version 3.3 or later to resolve the issue.
As a temporary workaround, consider avoiding the use of RTF documents with malformed tables in oowriter until a patch is available.
Correção
DoS
Buffer Overflow
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Openoffice
Openoffice.Org
Red Hat
Oowriter