CVE-2010-4643: Buffer Overflow
A heap-based buffer overflow was discovered in various versions of OpenOffice.org, when reading certain TGA files.
If a user opened a specially crafted TGA file, it could lead to application crash or possibly execution of arbitrary code, with the privileges of the user running OpenOffice.org Impress.
This has been assigned CVE-2010-4643.
Acknowledgements:
Red Hat would like to thank OpenOffice.org for reporting this issue.
Other sources
Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Truevision TGA (TARGA) file in an ODF or Microsoft Office document.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4643?
CVE-2010-4643 is considered a critical vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2010-4643?
To fix CVE-2010-4643, update Apache OpenOffice to a version that is not affected by the vulnerability.
Which versions of Apache OpenOffice are affected by CVE-2010-4643?
CVE-2010-4643 affects Apache OpenOffice versions from 2.0.0 to 3.3.0.
What kind of attack is possible with CVE-2010-4643?
An attacker can exploit CVE-2010-4643 by crafting a malicious TGA file that, when opened, may lead to application crashes or execution of arbitrary code.
In what conditions does CVE-2010-4643 occur?
CVE-2010-4643 occurs when a user opens a specially crafted TGA file using certain versions of Apache OpenOffice.