46 matches found
CVE-2021-33035 Buffer overflow from a crafted DBF file
Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets. DBF are database files with data organized in fields. When reading DBF data the size of certain fields is not checked: the data is just copied into local variables. A carefully crafted document could overflow the...
CVE-2021-33035
Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets. DBF are database files with data organized in fields. When reading DBF data the size of certain fields is not checked: the data is just copied into local variables. A carefully crafted document could overflow the...
CVE-2021-33035
Apache OpenOffice versions up to and including 4.1.10 are vulnerable to a buffer overflow when opening dBase/DBF documents as spreadsheets. The root cause is a failure to validate the size of certain fields, which are copied directly into local variables, allowing a crafted document to overflow a...
CVE-2021-33035: Buffer Copy without Checking Size of Input
Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets. DBF are database files with data organized in fields. When reading DBF data the size of certain fields is not checked: the data is just copied into local variables. A carefully crafted document could overflow the...
PT-2021-4126
Name of the Vulnerable Software and Affected Versions Apache OpenOffice versions up to and including 4.1.10 Description The issue is related to the processing of DBF files in Apache OpenOffice. When reading DBF data, the size of certain fields is not checked, and the data is copied into local...
Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...