Vulnerability in Apache Openoffice.org
CVE-2012-2149
The WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org (OOo) before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report this issue as an integer overflow.
EPSS: 0.134 (96.0th percentile) — read the EPSS interpretation.
Affected products
- Apache Openoffice.org — versions 3.3
- Libwpd — versions 0.8.8
- Redhat Enterprise_linux_desktop — versions 5.0
- Redhat Enterprise_linux__optional_productivity_applications
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_SECUNIA, VDB Entry, Third Party Advisory, third-party-advisory)
- secalert@redhat.com (vendor-advisory, x_refsource_GENTOO)
- secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- secalert@redhat.com (Exploit, x_refsource_MISC)
- secalert@redhat.com (mailing-list, x_refsource_BUGTRAQ)
- secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)
- secalert@redhat.com (Exploit, VDB Entry, Third Party Advisory, x_refsource_MISC)
- secalert@redhat.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)