CVE-2012-2334 Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service....
MediumCVSS 6.8
EPSS 13.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the length of an Escher graphics record in a PowerPoint (.ppt) document, which triggers a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libreoffice(Debian:12) | < 1:3.5.2~rc2-1 | 1:3.5.2~rc2-1 |
| debian/libreoffice(Debian:13) | < 1:3.5.2~rc2-1 | 1:3.5.2~rc2-1 |
| debian/libreoffice(Debian:14) | < 1:3.5.2~rc2-1 | 1:3.5.2~rc2-1 |
| apache openoffice.org | = 3.3 | No fix listed |
| apache openoffice.org | = 3.4-beta | No fix listed |
| libreoffice | <= 3.5.2 | No fix listed |
| libreoffice | = 3.3.0 | No fix listed |
| libreoffice | = 3.3.1 | No fix listed |
| libreoffice | = 3.3.2 | No fix listed |
| libreoffice | = 3.3.3 | No fix listed |
| libreoffice | = 3.3.4 | No fix listed |
| libreoffice | = 3.4.0 | No fix listed |
| libreoffice | = 3.4.1 | No fix listed |
| libreoffice | = 3.4.2 | No fix listed |
| libreoffice | = 3.4.5 | No fix listed |
| libreoffice | = 3.5 | No fix listed |
References
- Debian Security Tracker CVE-2012-2334 vendor-advisory
- 20120516 CVE-2012-2334 Vulnerabilities related to malformed Powerpoint files in OpenOffice.org 3.3.0 mailing-list
- cgit.freedesktop.org exploit patch
- cgit.freedesktop.org exploit patch
- FEDORA-2012-8114 vendor-advisory
- RHSA-2012:0705 vendor-advisory
- 46992 third-party-advisory vendor-advisory
- 47244 third-party-advisory vendor-advisory
- 49373 third-party-advisory vendor-advisory
- 49392 third-party-advisory vendor-advisory
- 60799 third-party-advisory
- 1027070 vdb-entry
- DSA-2487 vendor-advisory
- GLSA-201408-19 vendor-advisory
- www.libreoffice.org vendor-advisory
- MDVSA-2012:090 vendor-advisory
- MDVSA-2012:091 vendor-advisory
- www.openoffice.org vendor-advisory
- [oss-security] 20120528 Kind request to update upstream CVE-2012-2334 advisories they to reflect arbitrary code execution possibility too and OSS list notification mailing-list
- 82517 vdb-entry
- 53570 vdb-entry
- bugzilla.redhat.com
- openoffice-powerpoint-dos(75695) vdb-entry