CVE-2012-2334
- State
- Published
- Severity
- Not scored
- Published
- Jun 19, 2012
- Updated
- Aug 6, 2024
- Reserved
- Apr 19, 2012
Description
Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the length of an Escher graphics record in a PowerPoint (.ppt) document, which triggers a buffer overflow.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 60799third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=821803
- GLSA-201408-19vendor-advisory
- MDVSA-2012:090vendor-advisory
- 20120516 CVE-2012-2334 Vulnerabilities related to malformed Powerpoint files in OpenOffice.org 3.3.0mailing-list
- http://cgit.freedesktop.org/libreoffice/core/commit/?id=512401decb286ba0fc3031939b8f7de8649c502e
- FEDORA-2012-8114vendor-advisory
- 53570vdb-entry
- [oss-security] 20120528 Kind request to update upstream CVE-2012-2334 advisories they to reflect arbitrary code execution possibility too and OSS list notificationmailing-list
- 1027070vdb-entry
- http://www.libreoffice.org/advisories/cve-2012-2334/
- DSA-2487vendor-advisory
- 46992third-party-advisory
- http://cgit.freedesktop.org/libreoffice/core/commit/?id=28a6558f9d3ca2dda3191f8b5b3f2378ee2533da
- 47244third-party-advisory
- openoffice-powerpoint-dos(75695)vdb-entry
- 49392third-party-advisory
- 49373third-party-advisory
- RHSA-2012:0705vendor-advisory
- MDVSA-2012:091vendor-advisory
- http://www.openoffice.org/security/cves/CVE-2012-2334.html
- 82517vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.