Vulnerability in Apache Openoffice.org
CVE-2012-1149
Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JPEG image in a .DOC file, which triggers a heap-based buffer overflow.
EPSS: 0.137 (96.1th percentile) — read the EPSS interpretation.
Affected products
- Apache Openoffice.org — versions 3.3.0, 3.4
- Libreoffice
- Debian Debian_linux — versions 6.0, 7.0
- Fedoraproject Fedora — versions 15, 16
- Redhat Enterprise_linux — versions 5.0
- Redhat Enterprise_linux_desktop — versions 5.0, 6.0
- Redhat Enterprise_linux_server — versions 6.0
- Redhat Enterprise_linux_server_aus — versions 6.2
- Redhat Enterprise_linux_server_eus — versions 6.2.z
- Redhat Enterprise_linux_workstation — versions 6.0
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
- secalert@redhat.com (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
- secalert@redhat.com (mailing-list, x_refsource_BUGTRAQ, Broken Link)
- secalert@redhat.com (x_refsource_OSVDB, vdb-entry, Broken Link)
- secalert@redhat.com (vendor-advisory, x_refsource_MANDRIVA, Broken Link)
- secalert@redhat.com (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
- secalert@redhat.com (vendor-advisory, x_refsource_FEDORA, Third Party Advisory)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)