PT-2012-1204 · Document Foundation+4 · Libreoffice+5

Sven Jacobi · Published 2012-06-04 · Updated 2023-02-13 · CVE-2012-2334

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenOffice.org versions 3.3 through 3.4 Beta LibreOffice versions prior to 3.5.3

Description The issue is related to an integer overflow in the filter/source/msfilter/msdffimp.cxx component, which can be triggered by the length of an Escher graphics record in a PowerPoint (.ppt) document. This can cause a denial of service (crash) and possibly allow remote attackers to execute arbitrary code, leading to unauthorized access to confidential data, disruption of service, or impact on data integrity.

Recommendations For OpenOffice.org versions 3.3 through 3.4 Beta, consider updating to a version outside of this range to mitigate the risk. For LibreOffice versions prior to 3.5.3, update to version 3.5.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the msdffimp.cxx component or avoiding the opening of specially crafted PPT files until a patch is available.

Exploit

Fix

DoS

Weakness Enumeration

CWE-189

Related Identifiers

BDU:2020-02953

CESA-2012_0705

CVE-2012-2334

DSA-2487-1

RHSA-2012:0705

RHSA-2012_0705

Affected Products

Centos

Libreoffice

Openoffice

Openoffice.Org

Office Powerpoint

Red Hat

References · 40

• 🔥 http://cgit.freedesktop.org/libreoffice/core/commit/?id=512401decb286ba0fc3031939b8f7de8649c502e · Exploit
• 🔥 http://cgit.freedesktop.org/libreoffice/core/commit/?id=28a6558f9d3ca2dda3191f8b5b3f2378ee2533da · Exploit
• https://lists.fedoraproject.org/pipermail/package-announce/2012-June/082168.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-2334 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1149 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082168.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02953 · Security Note
• https://bdu.fstec.ru/vul/2020-02952 · Security Note
• http://gentoo.org/security/en/glsa/glsa-201408-19.xml · Vendor Advisory
• http://libreoffice.org/advisories/cve-2012-2334 · Vendor Advisory
• http://openoffice.org/security/cves/CVE-2012-2334.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2012:090 · Vendor Advisory
• http://secunia.com/advisories/49392 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-0705.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2012:091 · Vendor Advisory