9.3

CVE-2010-3452

Use-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted tags in an RTF document.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apache ≫ Openoffice Version >= 2.0.0 < 3.3.0
Canonical ≫ Ubuntu Linux Version8.04
Canonical ≫ Ubuntu Linux Version9.10
Canonical ≫ Ubuntu Linux Version10.04
Canonical ≫ Ubuntu Linux Version10.10
Debian ≫ Debian Linux Version5.0
Debian ≫ Debian Linux Version6.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 10.27% 0.951
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

http://secunia.com/advisories/60799
Broken Link
http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html
Vendor Advisory
http://secunia.com/advisories/40775
Broken Link
http://secunia.com/advisories/43105
Broken Link
http://ubuntu.com/usn/usn-1056-1
Third Party Advisory
http://www.vupen.com/english/advisories/2011/0230
Broken Link
http://www.vupen.com/english/advisories/2011/0279
Broken Link
http://www.cs.brown.edu/people/drosenbe/research.html
Broken Link
http://secunia.com/advisories/42999
Broken Link
http://secunia.com/advisories/43065
Broken Link
http://secunia.com/advisories/43118
Broken Link
http://www.debian.org/security/2011/dsa-2151
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2011:027
Broken Link
http://www.redhat.com/support/errata/RHSA-2011-0181.html
Broken Link
http://www.redhat.com/support/errata/RHSA-2011-0182.html
Broken Link
http://www.securityfocus.com/bid/46031
Third Party Advisory
Broken Link
VDB Entry
http://www.securitytracker.com/id?1025002
Third Party Advisory
Broken Link
VDB Entry
http://www.vupen.com/english/advisories/2011/0232
Broken Link
http://www.openoffice.org/security/cves/CVE-2010-3451_CVE-2010-3452.html
Vendor Advisory
http://www.vsecurity.com/resources/advisory/20110126-1
Broken Link
http://osvdb.org/70713
Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=640241
Third Party Advisory
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/65031
Third Party Advisory
VDB Entry