openoffice.org
Page content
- Author: Miklos Vajna
- Vulnerable: 3.2.1-4
- Unaffected: 3.2.1-5haven1
Charlie Miller has discovered two vulnerabilities in OpenOffice.org Impress, which can be exploited by malicious people to compromise a user’s system.
- An integer truncation error when parsing certain content can be exploited to cause a heap-based buffer overflow via a specially crafted file.
- A short integer overflow error when parsing certain content can be exploited to cause a heap-based buffer overflow via a specially crafted file. Successful exploitation of the vulnerabilities may allow execution of arbitrary code.
- Bug Tracker URL: http://bugs.frugalware.org/task/4296