CVE-2010-4253

OpenOffice 2.x-3.x < 3.3 - Heap-Based Buffer Overflow via Crafted PNG in ODF or Office Document

Title source: llm
STIX 2.1

Description

Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file in an ODF or Microsoft Office document, as demonstrated by a PowerPoint (aka PPT) document.

References (19)

Core 19
Core References
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/46031
Issue Tracking, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=658259
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40775
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2011/dsa-2151
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/60799
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43065
Broken Link, Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0230
Broken Link vdb-entry x_refsource_osvdb
http://osvdb.org/70717
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1025002
Broken Link, Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0232
Broken Link vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2011-0182.html
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://ubuntu.com/usn/usn-1056-1
Broken Link vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0279
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43105
Broken Link vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2011:027
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/42999

Scores

EPSS 0.1010
EPSS Percentile 95.1%

Details

CWE
CWE-787
Status published
Products (7)
apache/openoffice 2.0.0 - 3.3.0
canonical/ubuntu_linux 8.04
canonical/ubuntu_linux 9.10
canonical/ubuntu_linux 10.04
canonical/ubuntu_linux 10.10
debian/debian_linux 5.0
debian/debian_linux 6.0
Published Jan 28, 2011
Tracked Since Feb 18, 2026