CVE-2012-2149: apache openoffice.org Numeric Errors

CVSS: 7.5v2.0HighModified

AliasesRHSA-2012:1043DEBIAN-CVE-2012-2149

Published 21-06-2012Last modified 06-08-2024

Vulnerability summary

CVE-2012-2149 is a high (CVSS 7.5) Numeric Errors vulnerability in apache openoffice.org. EPSS estimates a 13.82% chance of exploitation in the next 30 days, higher than 96.4% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk

43/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

13.82%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits2reference

Timeline

21-06-2012
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org (OOo) before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report this issue as an integer overflow.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

13.82%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 13.82% on 19-09-2026

19-09-202619-10-2026

EPSS score

13.82%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (sec-consult.com)
Maturity: unknown
referenceUnverified
Exploit Reference (packetstormsecurity.org)
Maturity: unknown