Vulnerability Details : CVE-2012-2149
Potential exploit
The WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org (OOo) before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report this issue as an integer overflow.
Vulnerability category: OverflowExecute code
Products affected by CVE-2012-2149
- cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:enterprise_linux__optional_productivity_applications:*:*:*:*:*:*:*:*
- cpe:2.3:a:apache:openoffice.org:*:beta_1:*:*:*:*:*:*
- cpe:2.3:a:apache:openoffice.org:3.3:*:*:*:*:*:*:*
- cpe:2.3:a:libwpd:libwpd:0.8.8:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2012-2149
6.05%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 90 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2012-2149
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
CWE ids for CVE-2012-2149
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-2149
-
http://www.securityfocus.com/bid/53570
OpenOffice Prior to 3.4 Multiple Memory Corruption VulnerabilitiesThird Party Advisory;VDB Entry
-
http://secunia.com/advisories/46992
Sign inVendor Advisory
-
http://packetstormsecurity.org/files/112862/libwpd-WPXContentListener-_closeTableRow-Memory-Overwrite.html
libwpd WPXContentListener::_closeTableRow() Memory Overwrite ≈ Packet StormExploit;Third Party Advisory;VDB Entry
-
http://www.openoffice.org/security/cves/CVE-2012-2149.html
CVE-2012-2149Vendor Advisory
-
http://archives.neohapsis.com/archives/bugtraq/2012-05/0090.html
-
https://www.sec-consult.com/files/20120518-0_openoffice_memory_overwrite.txt
Page not found | SEC ConsultExploit
-
http://rhn.redhat.com/errata/RHSA-2012-1043.html
RHSA-2012:1043 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
http://secunia.com/advisories/60799
Sign inThird Party Advisory;VDB Entry
-
http://www.securitytracker.com/id?1027069
OpenOffice.org WordPerfect Library Memory Error Lets Remote Users Execute Arbitrary Code - SecurityTrackerThird Party Advisory;VDB Entry
-
http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml
OpenOffice, LibreOffice: Multiple vulnerabilities (GLSA 201408-19) — Gentoo security
Jump to