CVE-2012-1149 in OpenOffice
Summary
Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JPEG image in a .DOC file, which triggers a heap-based buffer overflow.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
02/14/2012
Disclosure
06/21/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 5435 | Apache OpenOffice vclmi.dll numeric error | 189 | Proof-of-Concept | Official fix | CVE-2012-1149 |