CVE-2012-1149 Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (application cr...
HighCVSS 7.5
EPSS 14.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JPEG image in a .DOC file, which triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libreoffice(Debian:12) | < 1:3.4.5-1 | 1:3.4.5-1 |
| debian/libreoffice(Debian:13) | < 1:3.4.5-1 | 1:3.4.5-1 |
| debian/libreoffice(Debian:14) | < 1:3.4.5-1 | 1:3.4.5-1 |
| libreoffice | <= 3.5.2 | No fix listed |
| debian linux | = 6.0 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| redhat enterprise linux | = 5.0 | No fix listed |
| redhat enterprise linux desktop | = 5.0 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server aus | = 6.2 | No fix listed |
| redhat enterprise linux server eus | = 6.2.z | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| apache openoffice.org | = 3.3.0 | No fix listed |
| apache openoffice.org | = 3.4-beta | No fix listed |
| fedoraproject fedora | = 15 | No fix listed |
| fedoraproject fedora | = 16 | No fix listed |
References
- Debian Security Tracker CVE-2012-1149 vendor-advisory
- 20120516 CVE-2012-1149 OpenOffice.org integer overflow error in vclmi.dll module when allocating memory for an embedded image object broken-link mailing-list
- FEDORA-2012-8114 third-party-advisory vendor-advisory
- FEDORA-2012-8042 third-party-advisory vendor-advisory
- RHSA-2012:0705 third-party-advisory vendor-advisory
- 46992 third-party-advisory
- 47244 third-party-advisory
- 49140 third-party-advisory
- 49373 third-party-advisory
- 49392 third-party-advisory vendor-advisory
- 50692 third-party-advisory
- 60799 third-party-advisory
- GLSA-201209-05 third-party-advisory vendor-advisory
- 1027068 patch third-party-advisory vdb-entry
- DSA-2473 third-party-advisory vendor-advisory
- DSA-2487 third-party-advisory vendor-advisory
- GLSA-201408-19 third-party-advisory vendor-advisory
- www.libreoffice.org vendor-advisory
- MDVSA-2012:090 broken-link vendor-advisory
- MDVSA-2012:091 broken-link vendor-advisory
- www.openoffice.org third-party-advisory
- 81988 broken-link vdb-entry
- 53570 third-party-advisory vdb-entry
- openoffice-vclmi-bo(75692) vdb-entry