Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-33035

Buffer overflow from a crafted DBF file

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apache

Description

Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets. DBF are database files with data organized in fields. When reading DBF data the size of certain fields is not checked: the data is just copied into local variables. A carefully crafted document could overflow the allocated space, leading to the execution of arbitrary code by altering the contents of the program stack. This issue affects Apache OpenOffice up to and including version 4.1.10

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache OpenOffice

  • Apache OpenOffice to ≤ 4.1.10affected
  • OpenOffice.org to ≤ 3.4affected

References