PT-2011-1220 · Apache+1 · Openoffice.Org+2
Dan Rosenberg
·
Published
2011-01-28
·
Updated
2022-02-07
·
CVE-2010-3452
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
OpenOffice.org (OOo) versions 2.x through 3.x before 3.3
Description
The issue is related to a use-after-free error in the oowriter component of OpenOffice, which can be exploited by remote attackers. This can lead to unauthorized access to sensitive data, disruption of data integrity, and denial of service. The exploitation is possible through specially crafted tags in an RTF document.
Recommendations
For versions 2.x through 3.x before 3.3, update to version 3.3 or later to resolve the issue.
As a temporary workaround, consider avoiding the use of RTF documents or restricting access to the oowriter component until a patch is available.
Fix
DoS
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Openoffice
Openoffice.Org
Red Hat