ubuntu · CVE-2012-2334

Quick triage

Priority: medium Published: 2012-06-19 00:00:00 UTC Updated: 2024-07-24 15:57:39 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2012-2334 medium priority: Ubuntu including 2 source packages (libreoffice, openoffice.org), 12 status rows across 6 suites (hardy, lucid, natty, oneiric, precise, upstream): not-affected 4, released 4, DNE 2, ignored 1, needs-triage 1.

Description:

Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the length of an Escher graphics record in a PowerPoint (.ppt) document, which triggers a buffer overflow.

cvelogic Threat Intelligence