CVE-2012-2334

Publication date 19 June 2012

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the length of an Escher graphics record in a PowerPoint (.ppt) document, which triggers a buffer overflow.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
libreoffice 12.04 LTS precise
Not affected
11.10 oneiric
Fixed 1:3.4.4-0ubuntu1.2
11.04 natty
Fixed 1:3.3.4-0ubuntu1.2
10.04 LTS lucid Not in release
8.04 LTS hardy Not in release
openoffice.org 12.04 LTS precise
Not affected
11.10 oneiric
Not affected
11.04 natty
Not affected
10.04 LTS lucid
Fixed 1:3.2.0-7ubuntu4.3
8.04 LTS hardy Ignored end of life

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
libreoffice

References

Related Ubuntu Security Notices (USN)

    • USN-1495-1
    • LibreOffice vulnerabilities
    • 2 July 2012
    • USN-1496-1
    • OpenOffice.org vulnerabilities
    • 2 July 2012

Other references