CVE-2010-2935

CVE-2010-2935 and CVE-2010-2936 affect OpenOffice.org Impress (simpress.bin) on OpenOffice.org 2.x/3.x up to 3.3. The issues arise from integer truncation and related heap-based buffer overflow when processing dictionary properties and polygons in PowerPoint documents, enabling denial of service ...

CVE-2010-2935

simpress.bin in the Impress module in OpenOffice.org OOo 2.x and 3.x before 3.3 does not properly handle integer values associated with dictionary property items, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PowerPoi...

OpenOffice.Org: Integer truncation error by parsing specially-crafted Microsoft PowerPoint document

simpress.bin in the Impress module in OpenOffice.org OOo 2.x and 3.x before 3.3 does not properly handle integer values associated with dictionary property items, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PowerPoi...