PT-2013-4877 · Apache+1 · Apache Openoffice.Org+2

Jeremy Brown · Publicado 2013-07-31 · Atualizado 2022-02-07 · CVE-2013-4156

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apache OpenOffice.org (OOo) versions prior to 4.0

Description The issue allows remote attackers to cause a denial of service, resulting in memory corruption, or possibly have other unspecified impacts. This can be achieved by using a crafted element in an OOXML document file.

Recommendations For versions prior to 4.0, update to version 4.0 or later to resolve the issue.

Correção

DoS

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2013-4156

OPENSUSE-SU-2014_1126-1

SUSE-SU-2014_1116-1

Produtos afetados

Apache Openoffice.Org

Openoffice

Suse

Referências · 72

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4156 · Nota de Segurança
• https://bugzilla.novell.com/828598 · Nota
• https://bugzilla.novell.com/820077 · Nota
• https://bugzilla.novell.com/878854 · Nota
• https://bugzilla.novell.com/780044 · Nota
• https://bugzilla.novell.com/825305 · Nota
• https://bugzilla.novell.com/820800 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-4156 · Aviso do Fabricante
• https://bugzilla.novell.com/753460 · Nota
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• https://bugzilla.novell.com/779620 · Nota
• https://osv.dev/vulnerability/CVE-2013-4156 · Aviso do Fabricante
• https://bugzilla.novell.com/779642 · Nota
• https://bugzilla.novell.com/817956 · Nota
• https://bugzilla.novell.com/829017 · Nota