Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JPEG image in a .DOC file, which triggers a heap-based buffer overflow.
Vector
NETWORK
Complexity
LOW
Authentication
NONE
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Fedora 16
Debian Linux 7.0
Redhat Enterprise linux workstation 6.0 (not an official CPE)
Red Hat Desktop 5.0
Debian GNU/Linux 6.0
Redhat Enterprise linux server aus 6.2 (not an official CPE)
Redhat Enterprise linux server 6.0 (not an official CPE)
Red Hat Enterprise Linux 5.0
Redhat Enterprise linux server eus 6.2.z (not an official CPE)
Redhat Enterprise linux desktop 6.0 (not an official CPE)
Fedora 15