CVE-2012-1149 in OpenOffice

Sumário (Inglês)

Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JPEG image in a .DOC file, which triggers a heap-based buffer overflow.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

14/02/2012

Divulgação

21/06/2012

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
5435	Apache OpenOffice vclmi.dll Execução remota de código	189	Prova de conceito	Correção oficial	CVE-2012-1149

Fontes

• MITRE
• NVD
• CVE Details