CVE-2005-0941 in Apache OpenOffice
Summary
The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow.
Reservation
03/31/2005
Disclosure
05/02/2005
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 1362 | Apache OpenOffice DOC Document Load heap-based overflow | 122 | Not defined | Official fix | CVE-2005-0941 |