Cloudanix VulnDB

CVE-2012-2149

None

CVSS

—

EPSS

13.8%

Published

Jun 21, 2012

CISA due date

—

The record

The WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org (OOo) before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report this issue as an integer overflow.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 libwpd 0 0.8.14-1
Debian:12 libwpd 0 0.8.14-1
Debian:13 libwpd 0 0.8.14-1
Red Hat:enterprise_linux:5::client libwpd 0 0:0.8.7-3.1.el5_8
Red Hat:enterprise_linux:5::client libwpd-debuginfo 0 0:0.8.7-3.1.el5_8
Red Hat:enterprise_linux:5::client libwpd-devel 0 0:0.8.7-3.1.el5_8
Red Hat:enterprise_linux:5::client libwpd-tools 0 0:0.8.7-3.1.el5_8
Red Hat:enterprise_linux:5::client_workstation libwpd 0 0:0.8.7-3.1.el5_8
Red Hat:enterprise_linux:5::client_workstation libwpd-debuginfo 0 0:0.8.7-3.1.el5_8
Red Hat:enterprise_linux:5::client_workstation libwpd-devel 0 0:0.8.7-3.1.el5_8
Red Hat:enterprise_linux:5::client_workstation libwpd-tools 0 0:0.8.7-3.1.el5_8
Red Hat:rhel_productivity:5 libwpd 0 0:0.8.7-3.1.el5_8
Red Hat:rhel_productivity:5 libwpd-debuginfo 0 0:0.8.7-3.1.el5_8
Red Hat:rhel_productivity:5 libwpd-devel 0 0:0.8.7-3.1.el5_8
Red Hat:rhel_productivity:5 libwpd-tools 0 0:0.8.7-3.1.el5_8

Related vulnerabilities