Published: 19/06/2012 Updated: 13/02/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice prior to 3.5.3, allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via the length of an Escher graphics record in a PowerPoint (.ppt) document, which triggers a buffer overflow.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache openoffice.org 3.3
apache openoffice.org 3.4
libreoffice libreoffice 3.3.1
libreoffice libreoffice 3.3.4
libreoffice libreoffice 3.4.5
libreoffice libreoffice 3.4.1
libreoffice libreoffice 3.4.2
libreoffice libreoffice 3.4.0
libreoffice libreoffice 3.3.3
libreoffice libreoffice 3.3.0
libreoffice libreoffice 3.3.2
libreoffice libreoffice 3.5
libreoffice libreoffice

Synopsis Important: openofficeorg security update Type/Severity Security Advisory: Important Topic Updated openofficeorg packages that fix multiple security issues are nowavailable for Red Hat Enterprise Linux 5 and 6The Red Hat Security Response Team has rated this update as havingimportant security imp ...

LibreOffice could be made to crash or potentially run programs as your login if it opened a specially crafted file ...

OpenOfficeorg could be made to crash or potentially run programs as your login if it opened a specially crafted file ...

It was discovered that OpenOfficeorg would not properly process crafted document files, possibly leading to arbitrary code execution CVE-2012-1149 Integer overflows in PNG image handling CVE-2012-2334 Integer overflow in operator new[] invocation and heap-based buffer overflow inside the MS-ODRAW parser For the stable distribution (squeeze ...

CWE-189 http://www.mandriva.com/security/advisories?name=MDVSA-2012:091 http://www.openwall.com/lists/oss-security/2012/05/28/2 http://www.openoffice.org/security/cves/CVE-2012-2334.html http://www.libreoffice.org/advisories/cve-2012-2334/http://secunia.com/advisories/49392 http://www.mandriva.com/security/advisories?name=MDVSA-2012:090 http://cgit.freedesktop.org/libreoffice/core/commit/?id=512401decb286ba0fc3031939b8f7de8649c502e http://www.debian.org/security/2012/dsa-2487 http://secunia.com/advisories/46992 http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082168.html https://bugzilla.redhat.com/show_bug.cgi?id=821803 http://www.osvdb.org/82517 http://securitytracker.com/id?1027070 http://rhn.redhat.com/errata/RHSA-2012-0705.html http://cgit.freedesktop.org/libreoffice/core/commit/?id=28a6558f9d3ca2dda3191f8b5b3f2378ee2533da http://secunia.com/advisories/47244 http://www.securityfocus.com/bid/53570 http://secunia.com/advisories/49373 http://archives.neohapsis.com/archives/bugtraq/2012-05/0091.html http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml http://secunia.com/advisories/60799 https://exchange.xforce.ibmcloud.com/vulnerabilities/75695 https://access.redhat.com/errata/RHSA-2012:0705 https://nvd.nist.gov https://usn.ubuntu.com/1495-1/

CVE-2012-2334

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect