CVE-2012-2334: Buffer Overflow
An integer overflow flaw, leading to buffer overflow, was found in the way OpenOffice.org processed invalid Escher graphics records length in PowerPoint documents. An attacker could provide a specially-crafted PowerPoint document that, when opened, would cause OpenOffice.org to crash or, potentially, execute arbitrary code with the privileges of the user running OpenOffice.org.
Upstream patches: [1] http://cgit.freedesktop.org/libreoffice/core/commit/?id=28a6558f9d3ca2dda3191f8b5b3f2378ee2533da [2] http://cgit.freedesktop.org/libreoffice/core/commit/?id=512401decb286ba0fc3031939b8f7de8649c502e
Other sources
Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the length of an Escher graphics record in a PowerPoint (.ppt) document, which triggers a buffer overflow.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2334?
CVE-2012-2334 is rated as a high severity vulnerability due to its potential to cause application crashes and buffer overflows.
How do I fix CVE-2012-2334?
To fix CVE-2012-2334, update your OpenOffice.org or LibreOffice to versions that include patches for the vulnerability.
Which software is affected by CVE-2012-2334?
CVE-2012-2334 affects specific versions of OpenOffice.org 3.3 and 3.4, as well as LibreOffice up to version 3.5.2.
Can CVE-2012-2334 be exploited remotely?
Yes, CVE-2012-2334 can be exploited remotely if a user opens a specially-crafted PowerPoint document.
What kind of attack does CVE-2012-2334 enable?
CVE-2012-2334 enables attackers to potentially execute arbitrary code or crash the OpenOffice.org or LibreOffice application.