CVE-2012-2334: apache openoffice.org Numeric Errors
Vulnerability summary
CVE-2012-2334 is a medium (CVSS 6.8) Numeric Errors vulnerability in apache openoffice.org. EPSS estimates a 13.50% chance of exploitation in the next 30 days, higher than 96.4% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 2Timeline
- 19-06-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the length of an Escher graphics record in a PowerPoint (.ppt) document, which triggers a buffer overflow.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
13.50%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 13.50% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (cgit.freedesktop.org)
Maturity: unknown
Exploit Reference (cgit.freedesktop.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Apache1 product
- openoffice.org3.3 | 3.4:beta
Debian1 product
- libreoffice< 1:3.5.2~rc2-1
Libreoffice1 product
- libreoffice≤ 3.5.2 | 3.3.0 | 3.3.1 | 3.3.2 | 3.3.3 | 3.3.4 | 3.4.0 | 3.4.1 | 3.4.2 | 3.4.5 | 3.5
3 vendors · 3 products
References
23 links- bugzilla.redhat.com/show_bug.cgi?id=821803X Refsource MISC
- cgit.freedesktop.org/libreoffice/core/commit/?id=512401decb286ba0fc3031939b8f7de8649c502eX Refsource CONFIRMExploitPatch
- lists.fedoraproject.org/pipermail/package-announce/2012-June/082168.htmlVendor AdvisoryX Refsource FEDORA
Show all 23 references
- cgit.freedesktop.org/libreoffice/core/commit/?id=28a6558f9d3ca2dda3191f8b5b3f2378ee2533daX Refsource CONFIRMExploitPatch