PT-2011-1220 · Apache+1 · Openoffice.Org+2

Dan Rosenberg

·

Publicado

2011-01-28

·

Atualizado

2022-02-07

·

CVE-2010-3452

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions OpenOffice.org (OOo) versions 2.x through 3.x before 3.3
Description The issue is related to a use-after-free error in the oowriter component of OpenOffice, which can be exploited by remote attackers. This can lead to unauthorized access to sensitive data, disruption of data integrity, and denial of service. The exploitation is possible through specially crafted tags in an RTF document.
Recommendations For versions 2.x through 3.x before 3.3, update to version 3.3 or later to resolve the issue. As a temporary workaround, consider avoiding the use of RTF documents or restricting access to the oowriter component until a patch is available.

Correção

DoS

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399CWE-416

Identificadores relacionados

BDU:2020-02898
CVE-2010-3452
DSA-2151-1
RHSA-2011:0181
RHSA-2011:0182
RHSA-2011:0183
RHSA-2011_0181
RHSA-2011_0182
RHSA-2011_0183

Produtos afetados

Openoffice
Openoffice.Org
Red Hat