QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2010-3453

Back to search

CVE-2010-3453

Published: Jan 28, 2011

Modified: Aug 7, 2024

PUBLISHED

Description

The WW8ListManager::WW8ListManager function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle an unspecified number of list levels in user-defined list styles in WW8 data in a Microsoft Word document, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .DOC file that triggers an out-of-bounds write.

VendorProductVersions

n/a

n/a

affected
n/a

References

40775
third-party-advisory
x_refsource_SECUNIA
46031
vdb-entry
x_refsource_BID
DSA-2151
vendor-advisory
x_refsource_DEBIAN
60799
third-party-advisory
x_refsource_SECUNIA
GLSA-201408-19
vendor-advisory
x_refsource_GENTOO
43118
third-party-advisory
x_refsource_SECUNIA
43065
third-party-advisory
x_refsource_SECUNIA
ADV-2011-0230
vdb-entry
x_refsource_VUPEN
1025002
vdb-entry
x_refsource_SECTRACK
ADV-2011-0232
vdb-entry
x_refsource_VUPEN
RHSA-2011:0182
vendor-advisory
x_refsource_REDHAT
USN-1056-1
vendor-advisory
x_refsource_UBUNTU
RHSA-2011:0181
vendor-advisory
x_refsource_REDHAT
70714
vdb-entry
x_refsource_OSVDB
ADV-2011-0279
vdb-entry
x_refsource_VUPEN
43105
third-party-advisory
x_refsource_SECUNIA
MDVSA-2011:027
vendor-advisory
x_refsource_MANDRIVA
42999
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now