ID CVE-2010-4253
Summary Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file in an ODF or Microsoft Office document, as demonstrated by a PowerPoint (aka PPT) document.
References
Vulnerable Configurations
  • cpe:2.3:a:apache:openoffice:2.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:openoffice:2.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:openoffice:2.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:openoffice:2.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:openoffice:2.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:apache:openoffice:2.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:openoffice:2.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:apache:openoffice:2.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:openoffice:2.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:apache:openoffice:2.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:openoffice:2.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:openoffice:2.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:openoffice:2.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:openoffice:2.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:openoffice:2.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:openoffice:2.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:openoffice:2.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:openoffice:2.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:openoffice:2.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:openoffice:2.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:openoffice:2.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:openoffice:2.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:openoffice:2.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:openoffice:2.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:openoffice:2.4.2:*:*:*:*:*:*:*
    cpe:2.3:a:apache:openoffice:2.4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:openoffice:2.4.3:*:*:*:*:*:*:*
    cpe:2.3:a:apache:openoffice:2.4.3:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:openoffice:3.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:openoffice:3.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:openoffice:3.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:openoffice:3.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:openoffice:3.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:openoffice:3.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:openoffice:3.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:openoffice:3.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:openoffice:3.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:openoffice:3.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:openoffice:3.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:openoffice:3.2.1:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
CVSS
Base: 9.3 (as of 13-02-2023 - 04:28)
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
redhat via4
advisories
rhsa
id RHSA-2011:0182
rpms
  • openoffice.org-base-1:3.1.1-19.5.el5_5.6
  • openoffice.org-calc-1:3.1.1-19.5.el5_5.6
  • openoffice.org-core-1:3.1.1-19.5.el5_5.6
  • openoffice.org-debuginfo-1:3.1.1-19.5.el5_5.6
  • openoffice.org-draw-1:3.1.1-19.5.el5_5.6
  • openoffice.org-emailmerge-1:3.1.1-19.5.el5_5.6
  • openoffice.org-graphicfilter-1:3.1.1-19.5.el5_5.6
  • openoffice.org-headless-1:3.1.1-19.5.el5_5.6
  • openoffice.org-impress-1:3.1.1-19.5.el5_5.6
  • openoffice.org-javafilter-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-af_ZA-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-ar-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-as_IN-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-bg_BG-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-bn-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-ca_ES-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-cs_CZ-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-cy_GB-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-da_DK-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-de-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-el_GR-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-es-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-et_EE-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-eu_ES-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-fi_FI-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-fr-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-ga_IE-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-gl_ES-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-gu_IN-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-he_IL-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-hi_IN-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-hr_HR-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-hu_HU-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-it-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-ja_JP-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-kn_IN-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-ko_KR-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-lt_LT-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-ml_IN-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-mr_IN-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-ms_MY-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-nb_NO-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-nl-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-nn_NO-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-nr_ZA-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-nso_ZA-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-or_IN-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-pa_IN-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-pl_PL-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-pt_BR-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-pt_PT-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-ru-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-sk_SK-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-sl_SI-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-sr_CS-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-ss_ZA-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-st_ZA-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-sv-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-ta_IN-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-te_IN-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-th_TH-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-tn_ZA-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-tr_TR-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-ts_ZA-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-ur-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-ve_ZA-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-xh_ZA-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-zh_CN-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-zh_TW-1:3.1.1-19.5.el5_5.6
  • openoffice.org-langpack-zu_ZA-1:3.1.1-19.5.el5_5.6
  • openoffice.org-math-1:3.1.1-19.5.el5_5.6
  • openoffice.org-pyuno-1:3.1.1-19.5.el5_5.6
  • openoffice.org-sdk-1:3.1.1-19.5.el5_5.6
  • openoffice.org-sdk-doc-1:3.1.1-19.5.el5_5.6
  • openoffice.org-testtools-1:3.1.1-19.5.el5_5.6
  • openoffice.org-ure-1:3.1.1-19.5.el5_5.6
  • openoffice.org-writer-1:3.1.1-19.5.el5_5.6
  • openoffice.org-xsltfilter-1:3.1.1-19.5.el5_5.6
  • autocorr-af-1:3.2.1-19.6.el6_0.5
  • autocorr-bg-1:3.2.1-19.6.el6_0.5
  • autocorr-cs-1:3.2.1-19.6.el6_0.5
  • autocorr-da-1:3.2.1-19.6.el6_0.5
  • autocorr-de-1:3.2.1-19.6.el6_0.5
  • autocorr-en-1:3.2.1-19.6.el6_0.5
  • autocorr-es-1:3.2.1-19.6.el6_0.5
  • autocorr-eu-1:3.2.1-19.6.el6_0.5
  • autocorr-fa-1:3.2.1-19.6.el6_0.5
  • autocorr-fi-1:3.2.1-19.6.el6_0.5
  • autocorr-fr-1:3.2.1-19.6.el6_0.5
  • autocorr-ga-1:3.2.1-19.6.el6_0.5
  • autocorr-hu-1:3.2.1-19.6.el6_0.5
  • autocorr-it-1:3.2.1-19.6.el6_0.5
  • autocorr-ja-1:3.2.1-19.6.el6_0.5
  • autocorr-ko-1:3.2.1-19.6.el6_0.5
  • autocorr-lb-1:3.2.1-19.6.el6_0.5
  • autocorr-lt-1:3.2.1-19.6.el6_0.5
  • autocorr-mn-1:3.2.1-19.6.el6_0.5
  • autocorr-nl-1:3.2.1-19.6.el6_0.5
  • autocorr-pl-1:3.2.1-19.6.el6_0.5
  • autocorr-pt-1:3.2.1-19.6.el6_0.5
  • autocorr-ru-1:3.2.1-19.6.el6_0.5
  • autocorr-sk-1:3.2.1-19.6.el6_0.5
  • autocorr-sl-1:3.2.1-19.6.el6_0.5
  • autocorr-sv-1:3.2.1-19.6.el6_0.5
  • autocorr-tr-1:3.2.1-19.6.el6_0.5
  • autocorr-vi-1:3.2.1-19.6.el6_0.5
  • autocorr-zh-1:3.2.1-19.6.el6_0.5
  • broffice.org-base-1:3.2.1-19.6.el6_0.5
  • broffice.org-brand-1:3.2.1-19.6.el6_0.5
  • broffice.org-calc-1:3.2.1-19.6.el6_0.5
  • broffice.org-draw-1:3.2.1-19.6.el6_0.5
  • broffice.org-impress-1:3.2.1-19.6.el6_0.5
  • broffice.org-math-1:3.2.1-19.6.el6_0.5
  • broffice.org-writer-1:3.2.1-19.6.el6_0.5
  • openoffice.org-base-1:3.2.1-19.6.el6_0.5
  • openoffice.org-base-core-1:3.2.1-19.6.el6_0.5
  • openoffice.org-brand-1:3.2.1-19.6.el6_0.5
  • openoffice.org-bsh-1:3.2.1-19.6.el6_0.5
  • openoffice.org-calc-1:3.2.1-19.6.el6_0.5
  • openoffice.org-calc-core-1:3.2.1-19.6.el6_0.5
  • openoffice.org-core-1:3.2.1-19.6.el6_0.5
  • openoffice.org-debuginfo-1:3.2.1-19.6.el6_0.5
  • openoffice.org-devel-1:3.2.1-19.6.el6_0.5
  • openoffice.org-draw-1:3.2.1-19.6.el6_0.5
  • openoffice.org-draw-core-1:3.2.1-19.6.el6_0.5
  • openoffice.org-emailmerge-1:3.2.1-19.6.el6_0.5
  • openoffice.org-graphicfilter-1:3.2.1-19.6.el6_0.5
  • openoffice.org-headless-1:3.2.1-19.6.el6_0.5
  • openoffice.org-impress-1:3.2.1-19.6.el6_0.5
  • openoffice.org-impress-core-1:3.2.1-19.6.el6_0.5
  • openoffice.org-javafilter-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-af_ZA-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-ar-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-as_IN-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-bg_BG-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-bn-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-ca_ES-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-cs_CZ-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-cy_GB-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-da_DK-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-de-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-dz-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-el_GR-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-en-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-es-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-et_EE-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-eu_ES-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-fi_FI-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-fr-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-ga_IE-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-gl_ES-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-gu_IN-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-he_IL-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-hi_IN-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-hr_HR-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-hu_HU-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-it-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-ja_JP-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-kn_IN-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-ko_KR-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-lt_LT-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-mai_IN-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-ml_IN-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-mr_IN-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-ms_MY-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-nb_NO-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-nl-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-nn_NO-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-nr_ZA-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-nso_ZA-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-or_IN-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-pa-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-pl_PL-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-pt_BR-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-pt_PT-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-ro-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-ru-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-sk_SK-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-sl_SI-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-sr-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-ss_ZA-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-st_ZA-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-sv-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-ta_IN-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-te_IN-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-th_TH-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-tn_ZA-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-tr_TR-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-ts_ZA-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-uk-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-ur-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-ve_ZA-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-xh_ZA-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-zh_CN-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-zh_TW-1:3.2.1-19.6.el6_0.5
  • openoffice.org-langpack-zu_ZA-1:3.2.1-19.6.el6_0.5
  • openoffice.org-math-1:3.2.1-19.6.el6_0.5
  • openoffice.org-math-core-1:3.2.1-19.6.el6_0.5
  • openoffice.org-ogltrans-1:3.2.1-19.6.el6_0.5
  • openoffice.org-opensymbol-fonts-1:3.2.1-19.6.el6_0.5
  • openoffice.org-pdfimport-1:3.2.1-19.6.el6_0.5
  • openoffice.org-presentation-minimizer-1:3.2.1-19.6.el6_0.5
  • openoffice.org-presenter-screen-1:3.2.1-19.6.el6_0.5
  • openoffice.org-pyuno-1:3.2.1-19.6.el6_0.5
  • openoffice.org-report-builder-1:3.2.1-19.6.el6_0.5
  • openoffice.org-rhino-1:3.2.1-19.6.el6_0.5
  • openoffice.org-sdk-1:3.2.1-19.6.el6_0.5
  • openoffice.org-sdk-doc-1:3.2.1-19.6.el6_0.5
  • openoffice.org-testtools-1:3.2.1-19.6.el6_0.5
  • openoffice.org-ure-1:3.2.1-19.6.el6_0.5
  • openoffice.org-wiki-publisher-1:3.2.1-19.6.el6_0.5
  • openoffice.org-writer-1:3.2.1-19.6.el6_0.5
  • openoffice.org-writer-core-1:3.2.1-19.6.el6_0.5
  • openoffice.org-xsltfilter-1:3.2.1-19.6.el6_0.5
refmap via4
bid 46031
confirm
debian DSA-2151
gentoo GLSA-201408-19
mandriva MDVSA-2011:027
osvdb 70717
sectrack 1025002
secunia
  • 40775
  • 42999
  • 43065
  • 43105
  • 60799
ubuntu USN-1056-1
vupen
  • ADV-2011-0230
  • ADV-2011-0232
  • ADV-2011-0279
Last major update 13-02-2023 - 04:28
Published 28-01-2011 - 22:00
Last modified 13-02-2023 - 04:28
Back to Top