LibreOffice and OpenOffice Multiple Heap Based Buffer Overflow Vulnerabilities
BID:54769
Info
LibreOffice and OpenOffice Multiple Heap Based Buffer Overflow Vulnerabilities
| Bugtraq ID: | 54769 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2012-2665 |
| Remote: | Yes |
| Local: | No |
| Published: | May 29 2012 12:00AM |
| Updated: | Apr 16 2015 05:45PM |
| Credit: | Timo Warns |
| Vulnerable: |
Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 11.10 i386 Ubuntu Ubuntu Linux 11.10 amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 RedHat Enterprise Linux Optional Productivity Application 5 server RedHat Enterprise Linux Desktop Workstation 5 client Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Red Hat Enterprise Linux Desktop 5 client Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 OpenOffice OpenOffice 3.2.1 OpenOffice OpenOffice 3.1.1 OpenOffice OpenOffice 3.1 OpenOffice OpenOffice 2.4.3 OpenOffice OpenOffice 2.4.2 OpenOffice OpenOffice 2.4.1 OpenOffice OpenOffice 2.3.1 OpenOffice OpenOffice 2.3 OpenOffice OpenOffice 2.2.1 OpenOffice OpenOffice 2.2 OpenOffice OpenOffice 2.0.4 OpenOffice OpenOffice 2.0.3 -1 OpenOffice OpenOffice 2.0.3 OpenOffice OpenOffice 2.0.2 OpenOffice OpenOffice 2.0.1 OpenOffice OpenOffice 1.9.125 OpenOffice OpenOffice 1.9.79 OpenOffice OpenOffice 1.9.29 OpenOffice OpenOffice 1.1.52 OpenOffice OpenOffice 1.1.51 OpenOffice OpenOffice 1.1.5 OpenOffice OpenOffice 1.1.4 OpenOffice OpenOffice 1.1.3 -9sarge3 OpenOffice OpenOffice 1.1.3 OpenOffice OpenOffice 1.1.2 OpenOffice OpenOffice 1.1.1 OpenOffice OpenOffice 1.1 .0 OpenOffice OpenOffice 1.0.3 OpenOffice OpenOffice 1.0.2 OpenOffice OpenOffice 1.0.1 OpenOffice OpenOffice 3.4 OpenOffice OpenOffice 3.3 OpenOffice OpenOffice 3.2 OpenOffice OpenOffice 2.4 OpenOffice OpenOffice 2.2 OpenOffice OpenOffice 2.1 OpenOffice OpenOffice 1.1.5-10.6.0.5.EL4 OpenOffice OpenOffice 1.1.2-38.2.0.EL3 Mandriva Linux Mandrake 2011 x86_64 Mandriva Linux Mandrake 2011 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 LibreOffice LibreOffice 3.5.3 LibreOffice LibreOffice 3.5.2 2 LibreOffice LibreOffice 3.5.3 LibreOffice LibreOffice 3.4.0 LibreOffice LibreOffice 3.3.3 LibreOffice LibreOffice 3.3.2 LibreOffice LibreOffice 3.3.1 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: | |
Discussion
LibreOffice and OpenOffice Multiple Heap Based Buffer Overflow Vulnerabilities
LibreOffice and OpenOffice are prone to multiple heap-based buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data.
Attackers can exploit these issues to execute arbitrary code on the affected device. Failed exploit attempts will result in a denial-of-service condition.
LibreOffice and OpenOffice are prone to multiple heap-based buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data.
Attackers can exploit these issues to execute arbitrary code on the affected device. Failed exploit attempts will result in a denial-of-service condition.
Exploit / POC
LibreOffice and OpenOffice Multiple Heap Based Buffer Overflow Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
LibreOffice and OpenOffice Multiple Heap Based Buffer Overflow Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
LibreOffice and OpenOffice Multiple Heap Based Buffer Overflow Vulnerabilities
References:
References:
- LibreOffice Homepage (LibreOffice)
- OpenOffice Homepage (OpenOffice)