From 8e8e106f7e68199b77c93a777e1a5a3cd7d8d65d Mon Sep 17 00:00:00 2001
From: "Mark J. Cox" <mark@awe.com>
Date: Thu, 23 Sep 2021 09:06:51 +0100
Subject: [PATCH] Apache OpenOffice, public not yet fixed

---
 2021/33xxx/CVE-2021-33035.json | 76 ++++++++++++++++++++++++++++++----
 1 file changed, 69 insertions(+), 7 deletions(-)

diff --git a/2021/33xxx/CVE-2021-33035.json b/2021/33xxx/CVE-2021-33035.json
index 8e9e678fc08..547d4c1710c 100644
--- a/2021/33xxx/CVE-2021-33035.json
+++ b/2021/33xxx/CVE-2021-33035.json
@@ -1,18 +1,80 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
+        "ASSIGNER": "security@apache.org",
         "ID": "CVE-2021-33035",
-        "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+        "STATE": "PUBLIC",
+        "TITLE": "Buffer overflow from a crafted DBF file"
     },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "Apache OpenOffice",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_affected": "<=",
+                                            "version_name": "Apache OpenOffice",
+                                            "version_value": "4.1.10"
+                                        },
+                                        {
+                                            "version_affected": "<=",
+                                            "version_name": "OpenOffice.org",
+                                            "version_value": "3.4"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    },
+                    "vendor_name": "Apache Software Foundation"
+                }
+            ]
+        }
+    },
+    "data_format": "MITRE",
+    "data_type": "CVE",
+    "data_version": "4.0",
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets.  DBF are database files with data organized in fields.  When reading DBF data the size of certain fields is not checked: the data is just copied into local variables. A carefully crafted document could overflow the allocated space, leading to the execution of arbitrary code by altering the contents of the program stack.  \n\nThis issue affects Apache OpenOffice up to and including version 4.1.10\n"
             }
         ]
+    },
+    "generator": {
+        "engine": "Vulnogram 0.0.9"
+    },
+    "impact": [
+        {
+            "other": "high"
+        }
+    ],
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "refsource": "CONFIRM",
+                "url": "https://github.com/apache/openoffice/commit/efddaef0151af3be16078cc4d88c6bae0f911e56#diff-ea66e734dd358922aba12ad4ba39c96bdc6cbde587d07dbc63d04daa0a30e90f"
+            }
+        ]
+    },
+    "source": {
+        "discovery": "UNKNOWN"
     }
-}
\ No newline at end of file
+}