CVE-2010-4643: apache openoffice Out-of-bounds Write

EPSS trend

Probability

10.10%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 10.10% on 18-09-2026

18-09-202618-10-2026

EPSS score

10.10%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

22 links

secunia.com/advisories/40775Third Party AdvisoryX Refsource SECUNIABroken Link
www.securityfocus.com/bid/46031VDB EntryX Refsource BIDBroken LinkThird Party Advisory
www.debian.org/security/2011/dsa-2151Vendor AdvisoryX Refsource DEBIANThird Party Advisory
secunia.com/advisories/60799Third Party AdvisoryX Refsource SECUNIABroken Link
www.oracle.com/technetwork/topics/security/cpuapr2011-301950.htmlX Refsource CONFIRMThird Party Advisory
www.gentoo.org/security/en/glsa/glsa-201408-19.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/43118Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/43065Third Party AdvisoryX Refsource SECUNIABroken Link
www.vupen.com/english/advisories/2011/0230VDB EntryX Refsource VUPENBroken LinkVendor Advisory
www.securitytracker.com/id?1025002VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory

Show all 22 references

www.vupen.com/english/advisories/2011/0232VDB EntryX Refsource VUPENBroken LinkVendor Advisory
osvdb.org/70718VDB EntryX Refsource OSVDBBroken Link
www.redhat.com/support/errata/RHSA-2011-0182.htmlVendor AdvisoryX Refsource REDHATBroken Link
bugzilla.redhat.com/show_bug.cgi?id=667588X Refsource CONFIRMIssue TrackingThird Party Advisory
ubuntu.com/usn/usn-1056-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.redhat.com/support/errata/RHSA-2011-0181.htmlVendor AdvisoryX Refsource REDHATBroken Link
www.vupen.com/english/advisories/2011/0279VDB EntryX Refsource VUPENBroken LinkVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/65441VDB EntryX Refsource XFThird Party Advisory
secunia.com/advisories/43105Third Party AdvisoryX Refsource SECUNIABroken Link
www.mandriva.com/security/advisories?name=MDVSA-2011:027Vendor AdvisoryX Refsource MANDRIVABroken Link
secunia.com/advisories/42999Third Party AdvisoryX Refsource SECUNIABroken Link
www.openoffice.org/security/cves/CVE-2010-4643.htmlX Refsource CONFIRMVendor Advisory

Related vulnerabilities

CVE-2018-11790apache software foundationapache openoffice+41.03%7y ago31-01-2019 16:00When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defect occurs. In this case OpenOffice runs into an Arithmetic Overflow at a string length calculation.CVE-2018-10583apacheopenoffice+2578.01%8y ago01-05-2018 16:00An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document.CVE-2013-2189apacheopenoffice+13.94%13y ago31-07-2013 10:00Apache OpenOffice.org (OOo) before 4.0 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via invalid PLCF data in a DOC document file.CVE-2013-4156apacheopenoffice+23.94%13y ago31-07-2013 10:00Apache OpenOffice.org (OOo) before 4.0 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted element in an OOXML document file.CVE-2021-40439apache software foundationapache openoffice+13.87%5y ago07-10-2021 15:50Apache OpenOffice has a dependency on expat software. Versions prior to 2.1.0 were subject to CVE-2013-0340 a "Billion Laughs" entity expansion denial of service attack and exploit via crafted XML files. ODF files consist of a set of XML files. All versions of Apache OpenOffice up to 4.1.10 are subject to this issue. expat in version 4.1.11 is patched.CVE-2021-41831apache software foundationapache openoffice+11.50%5y ago11-10-2021 08:10It is possible for an attacker to manipulate the timestamp of signed documents. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25634 for the LibreOffice advisory.

All vulnerabilities inopenoffice

CVE-2010-4643: apache openoffice Out-of-bounds Write

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References