CVE Request -- OpenOffice.org [two ids]: 1, integer truncation error 2, short integer overflow

[Jan Lieskovsky <jlieskov () redhat com>]

Hi Steve, vendors,

  two security flaws have been reported against OpenOffice.org's Impress tool:
    [1] http://securityevaluators.com/files/papers/CrashAnalysis.pdf

A, an integer truncation error, leading to heap-based buffer overflow when
   processing dictionary property items of the input *.ppt file:

   References:
     [2] https://bugzilla.redhat.com/show_bug.cgi?id=622529
     [3] http://secunia.com/advisories/40775/
     [4] http://securityevaluators.com/files/papers/CrashAnalysis.pdf
     [5] http://www.openoffice.org/servlets/ReadMsg?list=dev&msgNo=27690

B, a short integer overflow, leading to heap-based buffer overflow, when processing
   *.ppt document with too big polygons

   References:
     [6] https://bugzilla.redhat.com/show_bug.cgi?id=622555
     [7] http://secunia.com/advisories/40775/
     [8] http://securityevaluators.com/files/papers/CrashAnalysis.pdf
     [9] http://www.openoffice.org/servlets/ReadMsg?list=dev&msgNo=27690

Could you allocate CVE ids for these two issues?

Thanks && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Response Team