CVEvulnerability
CVE-2010-2935
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-08-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle integer values associated with dictionary property items, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PowerPoint document that triggers a heap-based buffer overflow, related to an "integer truncation error."
Affected configurations
• openoffice openoffice.org 3.2.1
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html lists.opensuse.org
- http://secunia.com/advisories/40775 Vendor Advisory
- http://secunia.com/advisories/41052 Vendor Advisory
- http://secunia.com/advisories/41235 secunia.com
- http://secunia.com/advisories/42927 secunia.com
- http://secunia.com/advisories/43105 secunia.com
- http://secunia.com/advisories/60799 secunia.com
- http://securityevaluators.com/files/papers/CrashAnalysis.pdf securityevaluators.com
- http://ubuntu.com/usn/usn-1056-1 ubuntu.com
- http://www.debian.org/security/2010/dsa-2099 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml www.gentoo.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:221 www.mandriva.com
- http://www.openoffice.org/security/cves/CVE-2010-2935_CVE-2010-2936.html www.openoffice.org
- http://www.openoffice.org/servlets/ReadMsg?list=dev&msgNo=27690 www.openoffice.org
- http://www.openwall.com/lists/oss-security/2010/08/11/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2010/08/11/4 www.openwall.com
- http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html www.oracle.com
- http://www.redhat.com/support/errata/RHSA-2010-0643.html www.redhat.com
- http://www.securitytracker.com/id?1024352 www.securitytracker.com
- http://www.securitytracker.com/id?1024976 www.securitytracker.com
- http://www.vupen.com/english/advisories/2010/2003 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/2149 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/2228 www.vupen.com
- http://www.vupen.com/english/advisories/2010/2905 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0150 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0230 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0279 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=622529 bugzilla.redhat.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12063 oval.cisecurity.org
- http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html lists.opensuse.org
- http://secunia.com/advisories/40775 Vendor Advisory
- http://secunia.com/advisories/41052 Vendor Advisory
- http://secunia.com/advisories/41235 secunia.com
- http://secunia.com/advisories/42927 secunia.com
- http://secunia.com/advisories/43105 secunia.com
- http://secunia.com/advisories/60799 secunia.com
- http://securityevaluators.com/files/papers/CrashAnalysis.pdf securityevaluators.com
- http://ubuntu.com/usn/usn-1056-1 ubuntu.com
- http://www.debian.org/security/2010/dsa-2099 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml www.gentoo.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:221 www.mandriva.com
- http://www.openoffice.org/security/cves/CVE-2010-2935_CVE-2010-2936.html www.openoffice.org
- http://www.openoffice.org/servlets/ReadMsg?list=dev&msgNo=27690 www.openoffice.org
- http://www.openwall.com/lists/oss-security/2010/08/11/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2010/08/11/4 www.openwall.com
- http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html www.oracle.com
- http://www.redhat.com/support/errata/RHSA-2010-0643.html www.redhat.com
- http://www.securitytracker.com/id?1024352 www.securitytracker.com
- http://www.securitytracker.com/id?1024976 www.securitytracker.com
- http://www.vupen.com/english/advisories/2010/2003 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/2149 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/2228 www.vupen.com
- http://www.vupen.com/english/advisories/2010/2905 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0150 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0230 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0279 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=622529 bugzilla.redhat.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12063 oval.cisecurity.org