NetSight
IP …
high7.5

CVE-2012-2665

Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before 3.5.5 allow remote attac…

Impact

Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before 3.5.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Open Document Text (.odt) file with (1) a child tag within an incorrect parent tag, (2) duplicate tags, or (3) a Base64 ChecksumAttribute whose length is not evenly divisible by four.

Affected products

VendorProductAffected versions
ApacheOpenoffice
before 3.4.1
LibreofficeLibreoffice
before 3.5.5
CanonicalUbuntu Linux
Versions 10.04, 11.04, 11.10, 12.04
DebianDebian Linux
Versions 6.0, 7.0
RedhatEnterprise Linux
Version 6.0
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux For Ibm Z Systems
Version 6.0
RedhatEnterprise Linux For Power Big Endian
Version 6.0
RedhatEnterprise Linux Server
Version 6.0
RedhatEnterprise Linux Server From Rhui 6
Version 6.0
RedhatEnterprise Linux Workstation
Version 6.0

Weakness classification

CWE-787

References