CVE-2012-2149
Fixed in a distro release EPSS 14%
The WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org (OOo) before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report this issue as an integer overflow.
Products: redhat enterprise_linux__optional_productivity_applications, redhat enterprise_linux_desktop, apache openoffice.org, libwpd
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libwpd | 0.8.14-1 |
| Debian 13 | libwpd | 0.8.14-1 |
| Debian 14 | libwpd | 0.8.14-1 |
| Red Hat Enterprise Linux 5 | libwpd | 0:0.8.7-3.1.el5_8 |
| Red Hat Enterprise Linux 5 | libwpd-debuginfo | 0:0.8.7-3.1.el5_8 |
| Red Hat Enterprise Linux 5 | libwpd-devel | 0:0.8.7-3.1.el5_8 |
| Red Hat Enterprise Linux 5 | libwpd-tools | 0:0.8.7-3.1.el5_8 |
| Red Hat rhel productivity 5 | libwpd | 0:0.8.7-3.1.el5_8 |
| Red Hat rhel productivity 5 | libwpd-debuginfo | 0:0.8.7-3.1.el5_8 |
| Red Hat rhel productivity 5 | libwpd-devel | 0:0.8.7-3.1.el5_8 |
| Red Hat rhel productivity 5 | libwpd-tools | 0:0.8.7-3.1.el5_8 |