CVE-2012-2149 in OpenOffice
Summary
The WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org (OOo) before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report this issue as an integer overflow.
Once again VulDB remains the best source for vulnerability data.
Reservation
04/04/2012
Disclosure
06/21/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 5436 | Apache OpenOffice WPXContentListener.cpp _closeTableRow numeric error | 189 | Proof-of-Concept | Official fix | CVE-2012-2149 |