Heap-based Buffer Overflow in Microsoft Import Filter for KOffice

CVE-2012-3455

What is CVE-2012-3455?

A vulnerability exists in the Microsoft import filter for KOffice that allows remote attackers to exploit a heap-based buffer overflow via a specially crafted ODF style within an ODF document. Successful exploitation can lead to application crashes or even arbitrary code execution, thereby compromising system integrity. Users of KOffice 2.3.3 and earlier are particularly at risk due to this flaw, as it can be triggered by opening malicious documents. This vulnerability is closely related to another identified issue, reflecting the shared codebase of Calligra and KOffice.

References