PT-2011-1221 · Apache+1 · Openoffice+1
Dan Rosenberg
·
Published
2011-01-28
·
Updated
2023-02-13
·
CVE-2010-3453
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
OpenOffice versions 2.x through 3.x before 3.3
OpenOffice version 3.x before 3.3
Description
The issue is related to the incorrect handling of an unspecified number of list levels in user-defined list styles in WW8 data in a Microsoft Word document. This can be exploited by a remote attacker to gain access to confidential data, compromise data integrity, and cause a denial of service, potentially leading to application crashes or the execution of arbitrary code through a crafted .DOC file that triggers an out-of-bounds write.
Recommendations
For OpenOffice versions 2.x through 3.x before 3.3, update to version 3.3 or later to resolve the issue.
For OpenOffice version 3.x before 3.3, update to version 3.3 or later to resolve the issue.
As a temporary workaround, consider avoiding the use of user-defined list styles in WW8 data until a patch is available.
Fix
DoS
Buffer Overflow
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Openoffice
Red Hat