PT-2011-1219 · Apache+1 · Oowriter+3
Dan Rosenberg
·
Published
2011-01-28
·
Updated
2022-02-07
·
CVE-2010-3451
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
OpenOffice.org (OOo) versions 2.x through 3.x before 3.3
oowriter in OpenOffice.org (OOo) versions 2.x through 3.x before 3.3
Description
The issue is related to a use-after-free error in the oowriter component of OpenOffice.org. This can be exploited by remote attackers to potentially execute arbitrary code or cause a denial of service, such as an application crash, by using malformed tables in an RTF document. The exploitation may allow attackers to access confidential data, compromise data integrity, and disrupt service.
Recommendations
For OpenOffice.org (OOo) versions 2.x through 3.x before 3.3, update to version 3.3 or later to resolve the issue.
For oowriter in OpenOffice.org (OOo) versions 2.x through 3.x before 3.3, update to version 3.3 or later to resolve the issue.
As a temporary workaround, consider avoiding the use of RTF documents with malformed tables in oowriter until a patch is available.
Fix
DoS
Buffer Overflow
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Openoffice
Openoffice.Org
Red Hat
Oowriter