NVD

Id
14834  
Name
CVE-2010-3453  
Description
The WW8ListManager::WW8ListManager function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle an unspecified number of list levels in user-defined list styles in WW8 data in a Microsoft Word document, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .DOC file that triggers an out-of-bounds write.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2011-01-28  
Modified Date
2015-11-17  
Seq
2010-3453  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
82229 14834 CVE-2010-3453 USN-1056-1  View
82230 14834 CVE-2010-3453 http://www.cs.brown.edu/people/drosenbe/research.html  View
82231 14834 CVE-2010-3453 DSA-2151  View
82232 14834 CVE-2010-3453 GLSA-201408-19  View
82233 14834 CVE-2010-3453 MDVSA-2011:027  View
82234 14834 CVE-2010-3453 http://www.openoffice.org/security/cves/CVE-2010-3453_CVE-2010-3454.html  View
82235 14834 CVE-2010-3453 http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html  View
82236 14834 CVE-2010-3453 RHSA-2011:0181  View
82237 14834 CVE-2010-3453 RHSA-2011:0182  View
82238 14834 CVE-2010-3453 46031  View
82239 14834 CVE-2010-3453 1025002  View
82240 14834 CVE-2010-3453 http://www.vsecurity.com/resources/advisory/20110126-1  View
82241 14834 CVE-2010-3453 ADV-2011-0230  View
82242 14834 CVE-2010-3453 ADV-2011-0232  View
82243 14834 CVE-2010-3453 ADV-2011-0279  View
82244 14834 CVE-2010-3453 https://bugzilla.redhat.com/show_bug.cgi?id=640950  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30895 JVNDB-2011-001134 OpenOffice.org の WW8ListManager::WW8ListManager 関数における任意のコードを実行される脆弱性 OpenOffice.org の oowriter 内にある WW8ListManager::WW8ListManager 関数には、 Microsoft Word ドキュメントの WW8 データ内にあるユーザ定義リストスタイルのリストレベルの不特定多数を適切に処理しないため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-3453 46033 CVE-2010-3453 14834 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001134.html 2011-01-28 2011-05-10 View