CVE-2012-3456

CVSSv4: NA | CVSSv3: NA | CVSSv2: 7.5 | VMScore: 850 | EPSS: 0.70085 | KEV: Not Included

Published: 20/08/2012 Updated: 21/11/2024

Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and previous versions allows remote malicious users to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3455, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.

Vulnerable Product	Search on Vulmon	Subscribe to Product
calligra calligra
calligra calligra 2.4
calligra calligra 2.4.1
calligra calligra 2.4.2

Debian Bug report logs - #684004 calligra: Buffer overflow Package: calligra; Maintainer for calligra is Debian Qt/KDE Maintainers <debian-qt-kde@listsdebianorg>; Source for calligra is src:calligra (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Mon, 6 Aug 2012 08:33:01 UTC Severity: ...

Calligra could be made to crash or run programs as your login if it opened a specially crafted file ...

source: wwwsecurityfocuscom/bid/54816/info Calligra is prone to a remote buffer-overflow vulnerability An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application Failed exploit attempts will likely result in denial-of-service conditions Calligra 243 and KOffice 233 are ...

CWE-119 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684004 https://usn.ubuntu.com/1525-1/https://www.exploit-db.com/exploits/37576/https://www.first.org/epss http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00026.html http://marc.info/?l=bugtraq&m=136733075705494&w=2 http://marc.info/?l=bugtraq&m=136733075705494&w=2 http://media.blackhat.com/bh-us-12/Briefings/C_Miller/BH_US_12_Miller_NFC_attack_surface_WP.pdf http://secunia.com/advisories/50050 http://www.kde.org/info/security/advisory-20120810-1.txt http://www.openwall.com/lists/oss-security/2012/08/04/1 http://www.openwall.com/lists/oss-security/2012/08/04/5 http://www.openwall.com/lists/oss-security/2012/08/06/1 http://www.openwall.com/lists/oss-security/2012/08/06/6 http://www.openwall.com/lists/oss-security/2012/08/10/1 http://www.securityfocus.com/bid/54816 http://www.ubuntu.com/usn/USN-1525-1 https://exchange.xforce.ibmcloud.com/vulnerabilities/77482 http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00026.html http://marc.info/?l=bugtraq&m=136733075705494&w=2 http://marc.info/?l=bugtraq&m=136733075705494&w=2 http://media.blackhat.com/bh-us-12/Briefings/C_Miller/BH_US_12_Miller_NFC_attack_surface_WP.pdf http://secunia.com/advisories/50050 http://www.kde.org/info/security/advisory-20120810-1.txt http://www.openwall.com/lists/oss-security/2012/08/04/1 http://www.openwall.com/lists/oss-security/2012/08/04/5 http://www.openwall.com/lists/oss-security/2012/08/06/1 http://www.openwall.com/lists/oss-security/2012/08/06/6 http://www.openwall.com/lists/oss-security/2012/08/10/1 http://www.securityfocus.com/bid/54816 http://www.ubuntu.com/usn/USN-1525-1 https://exchange.xforce.ibmcloud.com/vulnerabilities/77482

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook