CVE-2010-3454

Multiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted typography information in a Microsoft Word .DOC file that triggers an out-of-bounds write.

Date published : 2011-01-28

http://www.securityfocus.com/bid/46031

http://www.openoffice.org/security/cves/CVE-2010-3453_CVE-2010-3454.html