CVE-2012-2149: Integer Overflow
The WPXContentListener::closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org (OOo) before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report this issue as an integer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2149?
CVE-2012-2149 is considered critical due to its potential to allow remote code execution.
How do I fix CVE-2012-2149?
To mitigate CVE-2012-2149, users should upgrade to a patched version of libwpd or affected software.
Which software versions are affected by CVE-2012-2149?
CVE-2012-2149 affects libwpd 0.8.8, Apache OpenOffice.org versions up to 3.4, and various Red Hat Enterprise Linux products.
What type of attack does CVE-2012-2149 facilitate?
CVE-2012-2149 allows attackers to execute arbitrary code using a malicious Wordperfect .WPD document.
Is there a workaround for CVE-2012-2149?
There are no specific workarounds for CVE-2012-2149; updating software is the recommended solution.