CVE-2021-33035CWE-120

Buffer overflow from a crafted DBF file

published September 23, 2021

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 98.9th percentile for exploit probability.

CVSS
—
EPSS
51%
Percentile
98.9
In the wild
Unconfirmed
What it is

Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets. DBF are database files with data organized in fields. When reading DBF data the size of certain fields is not checked: the data is just copied into local variables. A carefully crafted document could overflow the allocated space, leading to the execution of arbitrary code by altering the contents of the program stack. This issue affects Apache OpenOffice up to and including version 4.1.10

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.50563 · 98.9th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2021-09-23T08:10Z
EPSS history
Timeline
  • 23 SEP 08:10Z
    Buffer overflow from a crafted DBF file
    cvelistv5