Memory corruption vulnerability in Apache OpenOffice

Description

An unspecified vulnerability was found in Apache OpenOffice Impress. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed .ODP and .OTP files.

---

Technical details

An exploitable out-of-bounds vulnerability occurs while handling MetaActions.

Vulnerability is related to files:

1. maintoolssourcegenericpoly2.cxx (see lines 217-230);
2. mainvclsourcegdimetaact.cxx (see line 1189).

Original advisories

• Original Apache advisory

Related products

• OpenOffice.org
• Apache-OpenOffice

CVE list

• CVE-2016-1513
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com