Vulnerability Description
simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle integer values associated with dictionary property items, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PowerPoint document that triggers a heap-based buffer overflow, related to an "integer truncation error."
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Openoffice | Openoffice.Org | 3.2.1 |
| Microsoft | Windows | All versions |
Related Weaknesses (CWE)
References
- http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
- http://secunia.com/advisories/40775Vendor Advisory
- http://secunia.com/advisories/41052Vendor Advisory
- http://secunia.com/advisories/41235
- http://secunia.com/advisories/42927
- http://secunia.com/advisories/43105
- http://secunia.com/advisories/60799
- http://securityevaluators.com/files/papers/CrashAnalysis.pdf
- http://ubuntu.com/usn/usn-1056-1
- http://www.debian.org/security/2010/dsa-2099
- http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:221
- http://www.openoffice.org/security/cves/CVE-2010-2935_CVE-2010-2936.html
- http://www.openoffice.org/servlets/ReadMsg?list=dev&msgNo=27690
FAQ
What is CVE-2010-2935?
CVE-2010-2935 is a vulnerability with a CVSS score of 9.3 (HIGH). simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle integer values associated with dictionary property items, which allows remote attackers to ca...
How severe is CVE-2010-2935?
CVE-2010-2935 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-2935?
Check the references section above for vendor advisories and patch information. Affected products include: Openoffice Openoffice.Org, Microsoft Windows.