NVD

Id
14366  
Name
CVE-2010-2935  
Description
simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle integer values associated with dictionary property items, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PowerPoint document that triggers a heap-based buffer overflow, related to an "integer truncation error."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-08-25  
Modified Date
2014-10-24  
Seq
2010-2935  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
79395 14366 CVE-2010-2935 SUSE-SR:2010:019  View
79396 14366 CVE-2010-2935 SUSE-SR:2010:024  View
79397 14366 CVE-2010-2935 oval:org.mitre.oval:def:12063  View
79398 14366 CVE-2010-2935 http://securityevaluators.com/files/papers/CrashAnalysis.pdf  View
79399 14366 CVE-2010-2935 USN-1056-1  View
79400 14366 CVE-2010-2935 DSA-2099  View
79401 14366 CVE-2010-2935 GLSA-201408-19  View
79402 14366 CVE-2010-2935 MDVSA-2010:221  View
79403 14366 CVE-2010-2935 http://www.openoffice.org/security/cves/CVE-2010-2935_CVE-2010-2936.html  View
79404 14366 CVE-2010-2935 [dev] 20100806 Two exploitable OpenOffice.org bugs!  View
79405 14366 CVE-2010-2935 [oss-security] 20100811 CVE Request -- OpenOffice.org [two ids]: 1, integer truncation error 2, short integer overflow  View
79406 14366 CVE-2010-2935 [oss-security] 20100811 Re: CVE Request -- OpenOffice.org [two ids]: 1, integer truncation error 2, short integer overflow  View
79407 14366 CVE-2010-2935 http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html  View
79408 14366 CVE-2010-2935 RHSA-2010:0643  View
79409 14366 CVE-2010-2935 1024352  View
79410 14366 CVE-2010-2935 1024976  View
79411 14366 CVE-2010-2935 ADV-2010-2003  View
79412 14366 CVE-2010-2935 ADV-2010-2149  View
79413 14366 CVE-2010-2935 ADV-2010-2228  View
79414 14366 CVE-2010-2935 ADV-2010-2905  View
79415 14366 CVE-2010-2935 ADV-2011-0150  View
79416 14366 CVE-2010-2935 ADV-2011-0230  View
79417 14366 CVE-2010-2935 ADV-2011-0279  View
79418 14366 CVE-2010-2935 https://bugzilla.redhat.com/show_bug.cgi?id=622529  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36187 JVNDB-2010-001967 Windows 上で稼働する OpenOffice.org の Impress モジュールにおける任意のコードを実行される脆弱性 Windows 上で稼働する OpenOffice.org (OOo) の Impress モジュール内にある simpress.bin には、dictionary プロパティアイテムに付随する整数の値を適切に処理しないため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-2935 45515 CVE-2010-2935 14366 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001967.html 2010-08-25 2011-02-01 View