CVE-2010-4643

CVE-2010-4643 describes a heap-based buffer overflow vulnerability in the Impress component of OpenOffice.org versions 2.x and 3.x before 3.3. This flaw allows remote attackers to trigger a denial of service or potentially execute arbitrary code by embedding a specially crafted Truevision TGA file within an ODF or Microsoft Office document. With a CVSS score of 9.3, this vulnerability is considered critical due to its network-based attack vector, medium attack complexity, and high potential for confidentiality, integrity, and availability impacts. Despite its severity, there is no evidence of active exploitation, public exploit code (e.g., Metasploit, ExploitDB), or significant community discussion surrounding this decade-old vulnerability.