CVE-2010-2935

CVE-2010-2935 describes a heap-based buffer overflow vulnerability in the Impress module (simpress.bin) of OpenOffice.org versions 2.x and 3.x prior to 3.3. This flaw, stemming from an integer truncation error when handling dictionary property items, allows remote attackers to trigger a denial of service or potentially execute arbitrary code through a specially crafted PowerPoint document. With a CVSS score of 9.3, this vulnerability is considered critical due to its network-based attack vector, medium complexity, and complete compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.