CVE-2012-2149

The WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org (OOo) before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report this issue as an integer overflow.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

13.82% chance of exploitation in the next 30 days, 96th percentile

Published

2012-06-21

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://packetstormsecurity.org/files/112862/libwpd-WPXContentListener-_closeTableRow-Memo…

References

• CVE Record
• NVD entry

Related

• CVE-2012-2139
• CVE-2012-2156
• CVE-2012-2138
• CVE-2012-2171
• CVE-2012-2131
• CVE-2012-2172