Heap-Based Buffer Overflows in OpenOffice.org and LibreOffice Products

CVE-2012-2665

Summary

Multiple heap-based buffer overflow vulnerabilities exist in the XML manifest encryption tag parsing functionality of OpenOffice.org and LibreOffice prior to version 3.5.5. These vulnerabilities can be exploited by sending specially crafted Open Document Text (.odt) files that contain incorrect child tags within a parent tag, duplicate tags, or a Base64 ChecksumAttribute with an invalid length, leading to denial of service and potentially allowing remote attackers to execute arbitrary code.

References