NVD

Id
14835  
Name
CVE-2010-3454  
Description
Multiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted typography information in a Microsoft Word .DOC file that triggers an out-of-bounds write.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2011-01-28  
Modified Date
2015-11-17  
Seq
2010-3454  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
82245 14835 CVE-2010-3454 USN-1056-1  View
82246 14835 CVE-2010-3454 http://www.cs.brown.edu/people/drosenbe/research.html  View
82247 14835 CVE-2010-3454 DSA-2151  View
82248 14835 CVE-2010-3454 GLSA-201408-19  View
82249 14835 CVE-2010-3454 MDVSA-2011:027  View
82250 14835 CVE-2010-3454 http://www.openoffice.org/security/cves/CVE-2010-3453_CVE-2010-3454.html  View
82251 14835 CVE-2010-3454 http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html  View
82252 14835 CVE-2010-3454 RHSA-2011:0181  View
82253 14835 CVE-2010-3454 RHSA-2011:0182  View
82254 14835 CVE-2010-3454 46031  View
82255 14835 CVE-2010-3454 1025002  View
82256 14835 CVE-2010-3454 http://www.vsecurity.com/resources/advisory/20110126-1  View
82257 14835 CVE-2010-3454 ADV-2011-0230  View
82258 14835 CVE-2010-3454 ADV-2011-0232  View
82259 14835 CVE-2010-3454 ADV-2011-0279  View
82260 14835 CVE-2010-3454 https://bugzilla.redhat.com/show_bug.cgi?id=640954  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30896 JVNDB-2011-001135 OpenOffice.org の WW8DopTypography::ReadFromMem 関数における任意のコードを実行される脆弱性 OpenOffice.org の oowriter 内にある WW8DopTypography::ReadFromMem 関数には、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-3454 46034 CVE-2010-3454 14835 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001135.html 2011-01-28 2011-05-10 View