CVE-2010-3453

The WW8ListManager::WW8ListManager function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle an unspecified number of list…

published January 28, 2011

CVSS
—
EPSS
10%
Percentile
95.5
In the wild
Unconfirmed
What it is

⚠️ A crafted .DOC file can bring OpenOffice.org to its knees! This vulnerability in the WW8ListManager function could lead to application crashes or even remote code execution. 🔥 Think of it like a restaurant where the chef can't handle an unexpected number of orders at once. If the kitchen gets overloaded, it might burn down — just like this vulnerability can cause the application to crash! An attacker could send a carefully crafted Microsoft Word document that, when opened in OpenOffice.org, not only crashes the application but could also lead to remote code execution. This could spell disaster, allowing malicious users to take control of the system and wreak havoc!

Put simply

Think of it like a restaurant where the chef can't handle an unexpected number of orders at once. If the kitchen gets overloaded, it might burn down — just like this vulnerability can cause the application to crash! This vulnerability arises from improper handling of user-defined list styles in WW8 data, resulting in an out-of-bounds write that could compromise the application's stability and security.

What to do

An attacker could send a carefully crafted Microsoft Word document that, when opened in OpenOffice.org, not only crashes the application but could also lead to remote code execution. This could spell disaster, allowing malicious users to take control of the system and wreak havoc! To protect yourself, make sure to update OpenOffice.org to version 3.3 or later. Additionally, avoid opening untrusted .DOC files until you can confirm your software is safe. It's also wise to keep an eye on future patches! You've got this! With the right updates, you can keep your OpenOffice.org environment secure and ready to go! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09672 · 95.5th percentile
Published
2011-01-28T21:13Z
EPSS history
Timeline
  • 28 JAN 21:13Z
    The WW8ListManager::WW8ListManager function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle an unspecified number of list…
    cvelistv5