CVE-2010-2935
25.08.2010, 20:00
simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle integer values associated with dictionary property items, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PowerPoint document that triggers a heap-based buffer overflow, related to an "integer truncation error."Enginsight
| Vendor | Product | Version |
|---|---|---|
| openoffice | openoffice.org | 3.2.1 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libreoffice |
| ||||||||||||||||||||
| openoffice.org |
|
Common Weakness Enumeration
References