CVE-2012-1149
- State
- Published
- Severity
- Not scored
- Published
- Jun 21, 2012
- Updated
- Aug 6, 2024
- Reserved
- Feb 14, 2012
Description
Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JPEG image in a .DOC file, which triggers a heap-based buffer overflow.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 60799third-party-advisory
- GLSA-201408-19vendor-advisory
- GLSA-201209-05vendor-advisory
- 20120516 CVE-2012-1149 OpenOffice.org integer overflow error in vclmi.dll module when allocating memory for an embedded image objectmailing-list
- 81988vdb-entry
- MDVSA-2012:090vendor-advisory
- DSA-2473vendor-advisory
- FEDORA-2012-8114vendor-advisory
- 49140third-party-advisory
- 53570vdb-entry
- http://www.openoffice.org/security/cves/CVE-2012-1149.html
- DSA-2487vendor-advisory
- 46992third-party-advisory
- 47244third-party-advisory
- 49392third-party-advisory
- 49373third-party-advisory
- 50692third-party-advisory
- http://www.libreoffice.org/advisories/cve-2012-1149/
- RHSA-2012:0705vendor-advisory
- FEDORA-2012-8042vendor-advisory
- MDVSA-2012:091vendor-advisory
- openoffice-vclmi-bo(75692)vdb-entry
- 1027068vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.