CVE-2012-2665

 

Published at: - 06-08-2012 08:55

Last modified: - 07-02-2022 05:34

Total changes: - 2

Description

Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before 3.5.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Open Document Text (.odt) file with (1) a child tag within an incorrect parent tag, (2) duplicate tags, or (3) a Base64 ChecksumAttribute whose length is not evenly divisible by four.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:P/I:P/A:P

 

Verification logic

 

Reference

• 1027332-Broken Link, Third Party Advisory, VDB Entry
• 1027331-Broken Link, Third Party Advisory, VDB Entry
• 50146-Broken Link
• RHSA-2012:1135-Third Party Advisory
• 50142-Broken Link
• https://bugzilla.redhat.com/show_bug.cgi?id=826077
• USN-1536-1-Third Party Advisory
• DSA-2520-Third Party Advisory
• USN-1537-1-Third Party Advisory
• 54769-Broken Link, Third Party Advisory, VDB Entry
• GLSA-201209-05-Third Party Advisory
• 50692-Broken Link
• GLSA-201408-19-Third Party Advisory
• 60799-Broken Link
• http://www.pre-cert.de/advisories/PRE-SA-2012-05.txt
• http://www.libreoffice.org/about-us/security/advisories/cve-2012-2665/

 

Keywords

NVD

 

CVE-2012-2665

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures