{"id":"CVE-2021-33035","details":"Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets. DBF are database files with data organized in fields. When reading DBF data the size of certain fields is not checked: the data is just copied into local variables. A carefully crafted document could overflow the allocated space, leading to the execution of arbitrary code by altering the contents of the program stack. This issue affects Apache OpenOffice up to and including version 4.1.10","modified":"2026-07-09T00:37:42.187812Z","published":"2021-09-23T08:15:06.747Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*"],"extracted_events":[{"last_affected":"4.1.10"}],"source":"CPE_RANGE","vendor_product":"apache:openoffice"}]},"references":[{"type":"WEB","url":"https://lists.apache.org/thread.html/r1ab8532e11f41bc7ca057ac7e39cab25f2e1f9d5f4929788ae21c8b9%40%3Cusers.openoffice.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/r929c0c6a53cad64a1007b878342756badbb05ddd9b8f31a6d0b424cb%40%3Cannounce.apache.org%3E"},{"type":"FIX","url":"http://www.openwall.com/lists/oss-security/2021/10/07/3"},{"type":"FIX","url":"https://github.com/apache/openoffice/commit/efddaef0151af3be16078cc4d88c6bae0f911e56#diff-ea66e734dd358922aba12ad4ba39c96bdc6cbde587d07dbc63d04daa0a30e90f"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/apache/openoffice","events":[{"introduced":"0"},{"fixed":"efddaef0151af3be16078cc4d88c6bae0f911e56"}],"database_specific":{"source":"REFERENCES"}}],"versions":["AOO4110-GA","AOO419-RC1","AOO419-GA","AOO418-GA","AOO417-RC1","AOO417"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-33035.json","vanir_signatures_modified":"2026-07-09T00:37:42Z","vanir_signatures":[{"signature_version":"v1","source":"https://github.com/apache/openoffice/commit/efddaef0151af3be16078cc4d88c6bae0f911e56","target":{"file":"main/connectivity/source/drivers/dbase/DTable.cxx"},"deprecated":false,"digest":{"line_hashes":["45440162389957604255905626603529725335","82794610105820116152049446941536408597","40167250557948147078495878996189024268","133700379638411507478702946716100400938","78365274679638878271582837390878776979","217258185725820225212674243758634207925","283932002540297624423756719311894332540","297642843435210793017015161435800743485","153954521404724754754150410033609149036","93474004402775400763911581455261501553","322579729294804470535741586061496447802","234161497663727760423625011231240358393","56062917593758919020730051025526737696","200932527314486895578222458250744060095","73761637768157053331883096598133565632","82303946915808837002010022923458055283","228052144930456730516468604916613275444","32491747081090546966856460526540454168","26518110829097771682509386403588971771","108705830419736848296487843220296220288","322620412825127284419718248507934372604","22849185902928543298743083567200064340","141200556960911424079889547810026952757","113977105453717791388582809297004217981","88123067284022145914367178739182219696","37013020818938368722363180972387590289","295770265560803284074927758796754221569","84780506411245086990659320246074865509","31247447469434762941345524595846044583","207751486673006366522872568041971226213","101177528008346083174779734491471253404","83615503289189908884667653529916818283","302096215218770842920828877264433013060","236848417179958912422380003131203912743","62081239596769060008475564235358740769","107825009946586193107959869852069273222","155418050046632633598909590799913231491","215252938652314607477228508979868176684","130863961729606335576582176332974225841","180404493269925590028280214915742332127","34747285126304207347122271983104937406","229736913416517543703909486386893672558"],"threshold":0.9},"id":"CVE-2021-33035-3fb9aac6","signature_type":"Line"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/openoffice/commit/efddaef0151af3be16078cc4d88c6bae0f911e56","target":{"file":"main/connectivity/source/drivers/dbase/DTable.cxx","function":"ODbaseTable::UpdateBuffer"},"deprecated":false,"digest":{"function_hash":"80645839608673722005866249499851469281","length":9352},"id":"CVE-2021-33035-4642bc14"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/openoffice/commit/efddaef0151af3be16078cc4d88c6bae0f911e56","target":{"file":"main/connectivity/source/drivers/dbase/DTable.cxx","function":"ODbaseTable::fetchRow"},"deprecated":false,"digest":{"function_hash":"92078909980497325635747126443034244286","length":4638},"id":"CVE-2021-33035-d56306b1"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}