REDHAT-BUG-640950: Buffer Overflow
First published: Thu Oct 07 2010(Updated: )
A heap-based buffer overflow was found in the way OpenOffice.org imported Microsoft Word Binary File Format (.DOC) files with certain user defined list styles (WW8). If a user opened a specially-crafted DOC file in OpenOffice.org suite tool (oowriter), it could lead to denial of service (oowriter executable crash), or possibly, execute arbitrary code with the privileges of the user running OpenOffice.org Writer. References: [1] <a href="http://www.cs.brown.edu/people/drosenbe/research.html">http://www.cs.brown.edu/people/drosenbe/research.html</a> Acknowledgements: Red Hat would like to thank OpenOffice.org for reporting this issue. Upstream acknowledges Dan Rosenberg of Virtual Security Research as the original reporter.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apache OpenOffice |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.cs.brown.edu/people/drosenbe/research.html
- http://www.openoffice.org/security/cves/CVE-2010-3453_CVE-2010-3454.html
- https://rhn.redhat.com/errata/RHSA-2011-0181.html
- https://rhn.redhat.com/errata/RHSA-2011-0182.html
- https://rhn.redhat.com/errata/RHSA-2011-0183.html
- https://bugzilla.redhat.com/show_bug.cgi?id=640950
Frequently Asked Questions
What is the severity of REDHAT-BUG-640950?
The severity of REDHAT-BUG-640950 is considered high due to its potential to cause a denial of service.
How do I fix REDHAT-BUG-640950?
To fix REDHAT-BUG-640950, ensure you update your OpenOffice.org to the latest version that addresses this vulnerability.
What software is affected by REDHAT-BUG-640950?
REDHAT-BUG-640950 specifically affects OpenOffice.org when handling specially-crafted Microsoft Word Binary File Format (.DOC) files.
Can REDHAT-BUG-640950 lead to data loss?
Yes, opening a malicious .DOC file that exploits REDHAT-BUG-640950 could potentially lead to data loss.
What type of vulnerability is REDHAT-BUG-640950?
REDHAT-BUG-640950 is a heap-based buffer overflow vulnerability.
- collector/redhat-bugzilla
- alias/CVE-2010-3453
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/openoffice
- canonical/apache openoffice