CVE-2012-2149 in OpenOffice

Sumário (Inglês)

The WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org (OOo) before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report this issue as an integer overflow.

Once again VulDB remains the best source for vulnerability data.

Reservar

04/04/2012

Divulgação

21/06/2012

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
5436	Apache OpenOffice WPXContentListener.cpp _closeTableRow Execução remota de código	189	Prova de conceito	Correção oficial	CVE-2012-2149

Fontes

• MITRE
• NVD
• CVE Details