CVE-2010-2936

[CVE catalog]

Severity

Unknown

Published

Aug 23, 2010, 2:29:00 PM UTC

Updated

Mar 9, 2026, 1:19:17 AM UTC

Source

[NVD] · [CVE record]

EPSS

7.09% · Oct 25, 2026

Integer overflow in simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted polygons in a PowerPoint document that triggers a heap-based buffer overflow. OpenOffice.org: Heap-based buffer overflow by parsing specially-crafted Microsoft PowerPoint document This issue is not planned to be fixed in Red Hat Enterprise Linux 5, as its impact is mitigated by standard glibc protection mechanisms to cause only application abort. Red Hat Security Response Team does not consider a user-assisted crash (abort) of a client application, such as OpenOffice.org Impress tool, to be a security issue. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.