Heap overflow

2012-08-0618:55:00

PRIOn knowledge base

www.prio-n.com

8.3 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.041 Low

EPSS

Percentile

91.9%

JSON

Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before 3.5.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Open Document Text (.odt) file with (1) a child tag within an incorrect parent tag, (2) duplicate tags, or (3) a Base64 ChecksumAttribute whose length is not evenly divisible by four.

CPENameOperatorVersion
openofficelt3.4.1
ubuntu_linuxeq11.04
ubuntu_linuxeq11.10
ubuntu_linuxeq10.04
ubuntu_linuxeq12.04
debian_linuxeq7.0
debian_linuxeq6.0
libreofficelt3.5.5
enterprise_linuxeq6.0
enterprise_linux_desktopeq6.0

Name	Operator	Version
openoffice	lt	3.4.1
ubuntu_linux	eq	11.04
ubuntu_linux	eq	11.10
ubuntu_linux	eq	10.04
ubuntu_linux	eq	12.04
debian_linux	eq	7.0
debian_linux	eq	6.0
libreoffice	lt	3.5.5
enterprise_linux	eq	6.0
enterprise_linux_desktop	eq	6.0