openoffice.org: code execution [LWN.net]

Package(s):

openoffice.org

CVE #(s):

CVE-2012-1149

Created:

May 17, 2012

Updated:

June 14, 2012

Description:

From the Debian advisory:

Tielei Wang discovered that OpenOffice.org does not allocate a large enough memory region when processing a specially crafted JPEG object, leading to a heap-based buffer overflow and potentially arbitrary code execution.

Alerts:

Debian	DSA-2473-1	2012-05-17
Fedora	FEDORA-2012-8042	2012-05-27
Red Hat	RHSA-2012:0705-01	2012-06-05
CentOS	CESA-2012:0705	2012-06-05
CentOS	CESA-2012:0705	2012-06-05
Scientific Linux	SL-open-20120605	2012-06-05
Oracle	ELSA-2012-0705	2012-06-05
Debian	DSA-2487-1	2012-06-07
Fedora	FEDORA-2012-8114	2012-06-13
Mandriva	MDVSA-2012:090	2012-06-14
Mandriva	MDVSA-2012:091	2012-06-14
Mandriva	MDVSA-2012:091	2012-06-15
Ubuntu	USN-1495-1	2012-07-02
Ubuntu	USN-1496-1	2012-07-02
Mageia	MGASA-2012-0253	2012-09-04
Gentoo	201209-05	2012-09-24

(Log in to post comments)