Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenOffice DOC文档信息读取堆溢出漏洞
Vulnerability Description
OpenOffice在处理DOC文档时存在缓冲区溢出，远程攻击者可能利用恶意DOC文档在用户机器上执行任意指令。OpenOffice的StgCompObjStream::Load()函数中存在安全漏洞。在读取格式的DOC文档信息时，会根据DOC提供的长度分配内存。DOC提供32位整数，其中的前16位用于分配内存。但在读取doc信息时，仍会将32位用作长度，这样就导致了堆溢出。在进行释放时，会导致覆盖指针，执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A