Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

openoffice openoffice.org 3.2.1 vulnerabilities and exploits

(subscribe to this query)
828
VMScore
CVE-2010-2935
simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x prior to 3.3 does not properly handle integer values associated with dictionary property items, which allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrar...
Openoffice Openoffice.org 3.2.1
828
VMScore
CVE-2010-2936
Integer overflow in simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x prior to 3.3 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via crafted polygons in a PowerPoint document that triggers a ...
Openoffice Openoffice.org 3.2.1
828
VMScore
CVE-2010-4643
Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x prior to 3.3 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Truevision TGA (TARGA) file in an ODF or Microsoft Office documen...
Apache Openoffice
828
VMScore
CVE-2010-3451
Use-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x prior to 3.3 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via malformed tables in an RTF document.
Apache OpenofficeCanonical Ubuntu Linux 8.04Canonical Ubuntu Linux 9.10Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 10.10Debian Debian Linux 5.0Debian Debian Linux 6.0
828
VMScore
CVE-2010-3452
Use-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x prior to 3.3 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via crafted tags in an RTF document.
Apache OpenofficeCanonical Ubuntu Linux 8.04Canonical Ubuntu Linux 9.10Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 10.10Debian Debian Linux 5.0Debian Debian Linux 6.0
614
VMScore
CVE-2010-3689
soffice in OpenOffice.org (OOo) 3.x prior to 3.3 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Apache OpenofficeCanonical Ubuntu Linux 8.04Canonical Ubuntu Linux 9.10Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 10.10Debian Debian Linux 5.0Debian Debian Linux 6.0
828
VMScore
CVE-2010-3450
Multiple directory traversal vulnerabilities in OpenOffice.org (OOo) 2.x and 3.x prior to 3.3 allow remote malicious users to overwrite arbitrary files via a .. (dot dot) in an entry in (1) an XSLT JAR filter description file, (2) an Extension (aka OXT) file, or unspecified other...
Apache OpenofficeCanonical Ubuntu Linux 8.04Canonical Ubuntu Linux 9.10Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 10.10Debian Debian Linux 5.0Debian Debian Linux 6.0
828
VMScore
CVE-2010-3453
The WW8ListManager::WW8ListManager function in oowriter in OpenOffice.org (OOo) 2.x and 3.x prior to 3.3 does not properly handle an unspecified number of list levels in user-defined list styles in WW8 data in a Microsoft Word document, which allows remote malicious users to caus...
Apache OpenofficeDebian Debian Linux 5.0Canonical Ubuntu Linux 10.10Debian Debian Linux 6.0Canonical Ubuntu Linux 9.10Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 10.04
828
VMScore
CVE-2010-3454
Multiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in OpenOffice.org (OOo) 2.x and 3.x prior to 3.3 allow remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via crafted typography informatio...
Apache OpenofficeCanonical Ubuntu Linux 8.04Canonical Ubuntu Linux 9.10Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 10.10Debian Debian Linux 5.0Debian Debian Linux 6.0
828
VMScore
CVE-2010-4253
Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x prior to 3.3 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file in an ODF or Microsoft Office document, as demonstrated ...
Apache OpenofficeDebian Debian Linux 5.0Canonical Ubuntu Linux 10.10Debian Debian Linux 6.0Canonical Ubuntu Linux 9.10Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 10.04
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypassCVE-2024-30051remoteCVE-2024-27954CVE-2023-51483CVE-2023-47782SSRFCVE-2024-24715CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook