PT-2012-1204 · Document Foundation+4 · Libreoffice+5
Sven Jacobi
·
Publicado
2012-06-04
·
Atualizado
2023-02-13
·
CVE-2012-2334
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
OpenOffice.org versions 3.3 through 3.4 Beta
LibreOffice versions prior to 3.5.3
Description
The issue is related to an integer overflow in the
filter/source/msfilter/msdffimp.cxx component, which can be triggered by the length of an Escher graphics record in a PowerPoint (.ppt) document. This can cause a denial of service (crash) and possibly allow remote attackers to execute arbitrary code, leading to unauthorized access to confidential data, disruption of service, or impact on data integrity.Recommendations
For OpenOffice.org versions 3.3 through 3.4 Beta, consider updating to a version outside of this range to mitigate the risk.
For LibreOffice versions prior to 3.5.3, update to version 3.5.3 or later to resolve the issue.
As a temporary workaround, consider restricting the use of the
msdffimp.cxx component or avoiding the opening of specially crafted PPT files until a patch is available.Exploit
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Libreoffice
Openoffice
Openoffice.Org
Office Powerpoint
Red Hat