REDHAT-BUG-641282: Buffer Overflow
First published: Fri Oct 08 2010(Updated: )
An array index error, leading to heap based buffer overflow, was found in the way OpenOffice.org parsed RTF files. If a user opened a specially-crafted RTF file, with broken RTF tables, in OpenOffice.org suite tool (oowriter), it could lead to denial of service (oowriter executable crash), or, possibly, execute arbitrary code with the privileges of the user running OpenOffice.org Writer. References: [1] <a href="http://www.cs.brown.edu/people/drosenbe/research.html">http://www.cs.brown.edu/people/drosenbe/research.html</a> Acknowledgements: Red Hat would like to thank OpenOffice.org for reporting this issue. Upstream acknowledges Dan Rosenberg of Virtual Security Research as the original reporter.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apache OpenOffice |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.cs.brown.edu/people/drosenbe/research.html
- http://www.openoffice.org/security/cves/CVE-2010-3451_CVE-2010-3452.html
- https://rhn.redhat.com/errata/RHSA-2011-0181.html
- https://rhn.redhat.com/errata/RHSA-2011-0182.html
- https://rhn.redhat.com/errata/RHSA-2011-0183.html
- https://bugzilla.redhat.com/show_bug.cgi?id=641282
Frequently Asked Questions
What is the severity of REDHAT-BUG-641282?
The severity of REDHAT-BUG-641282 is critical due to its potential to cause denial of service through heap-based buffer overflow.
How do I fix REDHAT-BUG-641282?
To fix REDHAT-BUG-641282, update your OpenOffice.org to the latest patched version that addresses this vulnerability.
What types of attacks can exploit REDHAT-BUG-641282?
REDHAT-BUG-641282 can be exploited through specially crafted RTF files that contain broken tables, leading to crashes of the OpenOffice.org suite tool.
Which versions of OpenOffice.org are affected by REDHAT-BUG-641282?
All versions of OpenOffice.org that can parse RTF files are potentially affected by REDHAT-BUG-641282.
What is the impact of exploiting REDHAT-BUG-641282?
Exploiting REDHAT-BUG-641282 may lead to crashes of the oowriter executable, causing denial of service.
- collector/redhat-bugzilla
- alias/CVE-2010-3451
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/weakness
- agent/description
- agent/event
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/openoffice
- canonical/apache openoffice