CVE-2010-2935 Integer overflow in n/a
Remote attackers can execute arbitrary code or crash the application via a crafted PowerPoint document exploiting an integer truncation error in OpenOffice Impress.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2010-2935?
CVE-2010-2935 is a critical vulnerability in n/a, published on 25 Aug 2010. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle integer values associated with dictionary property items, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PowerPoint document that triggers a heap-based buffer overflow, related to an "integer truncation error."
Weakness: CWE-189
Which versions are affected by CVE-2010-2935?
It affects 1 product.
Products include Openoffice Openoffice.org.
How do I fix CVE-2010-2935?
Upgrade to a fixed version.
Is CVE-2010-2935 being exploited?
There is no known exploitation of CVE-2010-2935 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-fhhr-xhww-w2vm.