CVE-2012-2665: apache openoffice Out-of-bounds Write

CVSS: 7.5v2.0HighModified

AliasesRHSA-2012:1135RHSA-2012:1136DEBIAN-CVE-2012-2665+1 more

Published 06-08-2012Last modified 06-08-2024

Vulnerability summary

CVE-2012-2665 is a high (CVSS 7.5) Out-of-bounds Write vulnerability in apache openoffice. EPSS estimates a 7.01% chance of exploitation in the next 30 days, higher than 94% of scored vulnerabilities.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

7.01%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

06-08-2012
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before 3.5.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Open Document Text (.odt) file with (1) a child tag within an incorrect parent tag, (2) duplicate tags, or (3) a Base64 ChecksumAttribute whose length is not evenly divisible by four.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

7.01%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 7.01% on 18-09-2026

18-09-202618-10-2026

EPSS score

7.01%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.

Affected systems

Redhat194 products

enterprise_linux_server_from_rhui_66.0
enterprise_linux_workstation6.0
autocorr-af< 1:3.4.5.2-16.1.el6_3
autocorr-bg< 1:3.4.5.2-16.1.el6_3
autocorr-cs< 1:3.4.5.2-16.1.el6_3
autocorr-da< 1:3.4.5.2-16.1.el6_3
autocorr-de< 1:3.4.5.2-16.1.el6_3
autocorr-en< 1:3.4.5.2-16.1.el6_3
autocorr-es< 1:3.4.5.2-16.1.el6_3
autocorr-eu< 1:3.4.5.2-16.1.el6_3
autocorr-fa< 1:3.4.5.2-16.1.el6_3
autocorr-fi< 1:3.4.5.2-16.1.el6_3
autocorr-fr< 1:3.4.5.2-16.1.el6_3
autocorr-ga< 1:3.4.5.2-16.1.el6_3
autocorr-hr< 1:3.4.5.2-16.1.el6_3
autocorr-hu< 1:3.4.5.2-16.1.el6_3
autocorr-it< 1:3.4.5.2-16.1.el6_3
autocorr-ja< 1:3.4.5.2-16.1.el6_3
autocorr-ko< 1:3.4.5.2-16.1.el6_3
autocorr-lb< 1:3.4.5.2-16.1.el6_3
autocorr-lt< 1:3.4.5.2-16.1.el6_3
autocorr-mn< 1:3.4.5.2-16.1.el6_3
autocorr-nl< 1:3.4.5.2-16.1.el6_3
autocorr-pl< 1:3.4.5.2-16.1.el6_3
autocorr-pt< 1:3.4.5.2-16.1.el6_3
autocorr-ru< 1:3.4.5.2-16.1.el6_3
autocorr-sk< 1:3.4.5.2-16.1.el6_3
autocorr-sl< 1:3.4.5.2-16.1.el6_3
autocorr-sr< 1:3.4.5.2-16.1.el6_3
autocorr-sv< 1:3.4.5.2-16.1.el6_3
autocorr-tr< 1:3.4.5.2-16.1.el6_3
autocorr-vi< 1:3.4.5.2-16.1.el6_3
autocorr-zh< 1:3.4.5.2-16.1.el6_3
libreoffice< 1:3.4.5.2-16.1.el6_3
libreoffice-base< 1:3.4.5.2-16.1.el6_3
libreoffice-bsh< 1:3.4.5.2-16.1.el6_3
libreoffice-calc< 1:3.4.5.2-16.1.el6_3
libreoffice-core< 1:3.4.5.2-16.1.el6_3
libreoffice-debuginfo< 1:3.4.5.2-16.1.el6_3
libreoffice-draw< 1:3.4.5.2-16.1.el6_3
libreoffice-emailmerge< 1:3.4.5.2-16.1.el6_3
libreoffice-gdb-debug-support< 1:3.4.5.2-16.1.el6_3
libreoffice-graphicfilter< 1:3.4.5.2-16.1.el6_3
libreoffice-headless< 1:3.4.5.2-16.1.el6_3
libreoffice-impress< 1:3.4.5.2-16.1.el6_3
libreoffice-javafilter< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-af< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-ar< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-as< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-bg< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-bn< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-ca< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-cs< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-cy< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-da< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-de< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-dz< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-el< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-en< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-es< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-et< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-eu< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-fi< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-fr< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-ga< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-gl< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-gu< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-he< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-hi< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-hr< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-hu< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-it< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-ja< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-kn< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-ko< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-lt< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-mai< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-ml< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-mr< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-ms< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-nb< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-nl< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-nn< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-nr< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-nso< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-or< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-pa< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-pl< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-pt-BR< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-pt-PT< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-ro< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-ru< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-sk< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-sl< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-sr< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-ss< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-st< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-sv< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-ta< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-te< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-th< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-tn< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-tr< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-ts< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-uk< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-ur< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-ve< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-xh< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-zh-Hans< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-zh-Hant< 1:3.4.5.2-16.1.el6_3
libreoffice-langpack-zu< 1:3.4.5.2-16.1.el6_3
libreoffice-math< 1:3.4.5.2-16.1.el6_3
libreoffice-ogltrans< 1:3.4.5.2-16.1.el6_3
libreoffice-opensymbol-fonts< 1:3.4.5.2-16.1.el6_3
libreoffice-pdfimport< 1:3.4.5.2-16.1.el6_3
libreoffice-presentation-minimizer< 1:3.4.5.2-16.1.el6_3
libreoffice-presenter-screen< 1:3.4.5.2-16.1.el6_3
libreoffice-pyuno< 1:3.4.5.2-16.1.el6_3
libreoffice-report-builder< 1:3.4.5.2-16.1.el6_3
libreoffice-rhino< 1:3.4.5.2-16.1.el6_3
libreoffice-sdk< 1:3.4.5.2-16.1.el6_3
libreoffice-sdk-doc< 1:3.4.5.2-16.1.el6_3
libreoffice-testtools< 1:3.4.5.2-16.1.el6_3
libreoffice-ure< 1:3.4.5.2-16.1.el6_3
libreoffice-wiki-publisher< 1:3.4.5.2-16.1.el6_3
libreoffice-writer< 1:3.4.5.2-16.1.el6_3
libreoffice-xsltfilter< 1:3.4.5.2-16.1.el6_3
openoffice.org< 1:3.1.1-19.10.el5_8.4
openoffice.org-base< 1:3.1.1-19.10.el5_8.4
openoffice.org-calc< 1:3.1.1-19.10.el5_8.4
openoffice.org-core< 1:3.1.1-19.10.el5_8.4
openoffice.org-debuginfo< 1:3.1.1-19.10.el5_8.4
openoffice.org-draw< 1:3.1.1-19.10.el5_8.4
openoffice.org-emailmerge< 1:3.1.1-19.10.el5_8.4
openoffice.org-graphicfilter< 1:3.1.1-19.10.el5_8.4
openoffice.org-headless< 1:3.1.1-19.10.el5_8.4
openoffice.org-impress< 1:3.1.1-19.10.el5_8.4
openoffice.org-javafilter< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-af_ZA< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-ar< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-as_IN< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-bg_BG< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-bn< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-ca_ES< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-cs_CZ< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-cy_GB< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-da_DK< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-de< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-el_GR< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-es< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-et_EE< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-eu_ES< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-fi_FI< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-fr< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-ga_IE< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-gl_ES< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-gu_IN< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-he_IL< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-hi_IN< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-hr_HR< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-hu_HU< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-it< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-ja_JP< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-kn_IN< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-ko_KR< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-lt_LT< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-ml_IN< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-mr_IN< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-ms_MY< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-nb_NO< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-nl< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-nn_NO< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-nr_ZA< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-nso_ZA< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-or_IN< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-pa_IN< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-pl_PL< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-pt_BR< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-pt_PT< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-ru< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-sk_SK< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-sl_SI< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-sr_CS< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-ss_ZA< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-st_ZA< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-sv< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-ta_IN< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-te_IN< 1:3.1.1-19.10.el5_8.4
openoffice.org-langpack-th_TH< 1:3.1.1-19.10.el5_8.4

Show all 194

Debian3 products

libreoffice< 1:3.5.4-7
openoffice.org< 1:3.2.1-11+squeeze7
debian_linuxEOL6.0 | 7.0

Apache1 product

openoffice< 3.4.1

Canonical1 product

ubuntu_linuxEOL10.04 | 11.04 | 11.10 | 12.04

Libreoffice1 product

libreoffice< 3.5.5

5 vendors · 200 products · Showing 200 of 217. Use Open JSON for the complete list.

References

26 links

secunia.com/advisories/60799Third Party AdvisoryX Refsource SECUNIABroken Link
www.gentoo.org/security/en/glsa/glsa-201408-19.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
security.gentoo.org/glsa/glsa-201209-05.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=826077X Refsource MISCIssue TrackingThird Party AdvisoryREPORT
www.debian.org/security/2012/dsa-2520Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.ubuntu.com/usn/USN-1536-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
rhn.redhat.com/errata/RHSA-2012-1135.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.pre-cert.de/advisories/PRE-SA-2012-05.txtX Refsource MISCThird Party Advisory
www.securityfocus.com/bid/54769VDB EntryX Refsource BIDBroken LinkThird Party Advisory
secunia.com/advisories/50692Third Party AdvisoryX Refsource SECUNIABroken Link

Show all 26 references

www.securitytracker.com/id?1027332VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
www.securitytracker.com/id?1027331VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
secunia.com/advisories/50142Third Party AdvisoryX Refsource SECUNIABroken Link
www.ubuntu.com/usn/USN-1537-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.libreoffice.org/about-us/security/advisories/cve-2012-2665/X Refsource CONFIRMVendor Advisory
secunia.com/advisories/50146Third Party AdvisoryX Refsource SECUNIABroken Link
access.redhat.com/errata/RHSA-2012:1135Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1135.jsonAdvisory
access.redhat.com/security/cve/CVE-2012-2665REPORT
www.cve.org/CVERecord?id=CVE-2012-2665Advisory
nvd.nist.gov/vuln/detail/CVE-2012-2665Advisory
www.libreoffice.org/advisories/CVE-2012-2665/ARTICLE
access.redhat.com/errata/RHSA-2012:1136Advisory
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1136.jsonAdvisory
security-tracker.debian.org/tracker/CVE-2012-2665Advisory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities