CVE - CVE-2012-1149

CVE-ID
CVE-2012-1149	Learn more at National Vulnerability Database (NVD) • Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JPEG image in a .DOC file, which triggers a heap-based buffer overflow.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20120516 CVE-2012-1149 OpenOffice.org integer overflow error in vclmi.dll module when allocating memory for an embedded image object URL:http://archives.neohapsis.com/archives/bugtraq/2012-05/0089.html CONFIRM:http://www.libreoffice.org/advisories/cve-2012-1149/ CONFIRM:http://www.openoffice.org/security/cves/CVE-2012-1149.html DEBIAN:DSA-2473 URL:http://www.debian.org/security/2012/dsa-2473 DEBIAN:DSA-2487 URL:http://www.debian.org/security/2012/dsa-2487 FEDORA:FEDORA-2012-8042 URL:http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081319.html FEDORA:FEDORA-2012-8114 URL:http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082168.html GENTOO:GLSA-201209-05 URL:http://security.gentoo.org/glsa/glsa-201209-05.xml GENTOO:GLSA-201408-19 URL:http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml MANDRIVA:MDVSA-2012:090 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2012:090 MANDRIVA:MDVSA-2012:091 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2012:091 REDHAT:RHSA-2012:0705 URL:http://rhn.redhat.com/errata/RHSA-2012-0705.html BID:53570 URL:http://www.securityfocus.com/bid/53570 OSVDB:81988 URL:http://www.osvdb.org/81988 SECTRACK:1027068 URL:http://securitytracker.com/id?1027068 SECUNIA:46992 URL:http://secunia.com/advisories/46992 SECUNIA:47244 URL:http://secunia.com/advisories/47244 SECUNIA:49373 URL:http://secunia.com/advisories/49373 SECUNIA:49392 URL:http://secunia.com/advisories/49392 SECUNIA:49140 URL:http://secunia.com/advisories/49140 SECUNIA:50692 URL:http://secunia.com/advisories/50692 SECUNIA:60799 URL:http://secunia.com/advisories/60799 XF:openoffice-vclmi-bo(75692) URL:http://xforce.iss.net/xforce/xfdb/75692
Assigning CNA
N/A
Date Entry Created
20120214	Disclaimer: The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20120214)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE list, which standardizes names for security problems.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org

Common Vulnerabilities and Exposures

CVE-2012-1149