CVE-2010-3451: apache openoffice Use After Free

CVSS: 9.3v2.0HighModified

Published 28-01-2011Last modified 07-08-2024

Vulnerability summary

CVE-2010-3451 is a high (CVSS 9.3) Use After Free vulnerability in apache openoffice. EPSS estimates a 10.27% chance of exploitation in the next 30 days, higher than 95.6% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

10.27%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4

DSA-2151-1 RHSA-2011:0181 RHSA-2011:0182 RHSA-2011:0183

Timeline

28-01-2011
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Use-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via malformed tables in an RTF document.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

10.27%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 10.27% on 18-09-2026

18-09-202618-10-2026

EPSS score

10.27%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-416Use After FreeThe product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Affected systems

Apache1 product

openoffice≥ 2.0.0, < 3.3.0

Canonical1 product

ubuntu_linuxEOL8.04 | 9.10 | 10.04 | 10.10

Debian1 product

debian_linuxEOL5.0 | 6.0

3 vendors · 3 products

References

24 links

secunia.com/advisories/40775Third Party AdvisoryX Refsource SECUNIABroken Link
www.securityfocus.com/bid/46031VDB EntryX Refsource BIDBroken LinkThird Party Advisory
www.debian.org/security/2011/dsa-2151Vendor AdvisoryX Refsource DEBIANThird Party Advisory
secunia.com/advisories/60799Third Party AdvisoryX Refsource SECUNIABroken Link
www.oracle.com/technetwork/topics/security/cpuapr2011-301950.htmlX Refsource CONFIRMThird Party Advisory
www.gentoo.org/security/en/glsa/glsa-201408-19.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/43118Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/43065Third Party AdvisoryX Refsource SECUNIABroken Link
www.vupen.com/english/advisories/2011/0230VDB EntryX Refsource VUPENBroken Link
osvdb.org/70712VDB EntryX Refsource OSVDBBroken Link

Show all 24 references

exchange.xforce.ibmcloud.com/vulnerabilities/65030VDB EntryX Refsource XFThird Party Advisory
www.securitytracker.com/id?1025002VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
www.openoffice.org/security/cves/CVE-2010-3451_CVE-2010-3452.htmlX Refsource CONFIRMVendor Advisory
www.vupen.com/english/advisories/2011/0232VDB EntryX Refsource VUPENBroken Link
www.redhat.com/support/errata/RHSA-2011-0182.htmlVendor AdvisoryX Refsource REDHATBroken Link
bugzilla.redhat.com/show_bug.cgi?id=641282X Refsource CONFIRMIssue TrackingThird Party Advisory
ubuntu.com/usn/usn-1056-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.redhat.com/support/errata/RHSA-2011-0181.htmlVendor AdvisoryX Refsource REDHATBroken Link
www.vupen.com/english/advisories/2011/0279VDB EntryX Refsource VUPENBroken Link
secunia.com/advisories/43105Third Party AdvisoryX Refsource SECUNIABroken Link
www.mandriva.com/security/advisories?name=MDVSA-2011:027Vendor AdvisoryX Refsource MANDRIVABroken Link
www.vsecurity.com/resources/advisory/20110126-1X Refsource MISCBroken Link
www.cs.brown.edu/people/drosenbe/research.htmlX Refsource MISCBroken Link
secunia.com/advisories/42999Third Party AdvisoryX Refsource SECUNIABroken Link

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities