CVE-2012-2665 Detail

CVE-2012-2665

CVE Descriptions

Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before 3.5.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Open Document Text (.odt) file with (1) a child tag within an incorrect parent tag, (2) duplicate tags, or (3) a Base64 ChecksumAttribute whose length is not evenly divisible by four.

CVE Informations

Related Weaknesses

CWE-ID	Weakness Name	Source
CWE-787	Out-of-bounds Write The product writes data past the end, or before the beginning, of the intended buffer.

Metrics

Metrics	Score	Severity	CVSS Vector	Source
V2	7.5		AV:N/AC:L/Au:N/C:P/I:P/A:P	[email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

EPSS First.org

Products Mentioned

Configuraton 0

Apache>>Openoffice >> Version To (excluding) 3.4.1

Apache>>Openoffice >> Version - (Open CPE detail)
Apache>>Openoffice >> Version 1.0.2 (Open CPE detail)
Apache>>Openoffice >> Version 1.0.3 (Open CPE detail)
Apache>>Openoffice >> Version 1.1.0 (Open CPE detail)
Apache>>Openoffice >> Version 1.1.4 (Open CPE detail)
Apache>>Openoffice >> Version 1.1.5 (Open CPE detail)
Apache>>Openoffice >> Version 1.1.5 (Open CPE detail)
Apache>>Openoffice >> Version 1.1.5 (Open CPE detail)
Apache>>Openoffice >> Version 2.0.0 (Open CPE detail)
Apache>>Openoffice >> Version 2.0.1 (Open CPE detail)
Apache>>Openoffice >> Version 2.0.2 (Open CPE detail)
Apache>>Openoffice >> Version 2.0.3 (Open CPE detail)
Apache>>Openoffice >> Version 2.0.4 (Open CPE detail)
Apache>>Openoffice >> Version 2.1.0 (Open CPE detail)
Apache>>Openoffice >> Version 2.2.0 (Open CPE detail)
Apache>>Openoffice >> Version 2.2.1 (Open CPE detail)
Apache>>Openoffice >> Version 2.3.0 (Open CPE detail)
Apache>>Openoffice >> Version 2.3.1 (Open CPE detail)
Apache>>Openoffice >> Version 2.4.0 (Open CPE detail)
Apache>>Openoffice >> Version 2.4.1 (Open CPE detail)
Apache>>Openoffice >> Version 2.4.1 (Open CPE detail)
Apache>>Openoffice >> Version 2.4.2 (Open CPE detail)
Apache>>Openoffice >> Version 2.4.3 (Open CPE detail)
Apache>>Openoffice >> Version 3.0.0 (Open CPE detail)
Apache>>Openoffice >> Version 3.0.1 (Open CPE detail)
Apache>>Openoffice >> Version 3.1.0 (Open CPE detail)
Apache>>Openoffice >> Version 3.1.1 (Open CPE detail)
Apache>>Openoffice >> Version 3.2.0 (Open CPE detail)
Apache>>Openoffice >> Version 3.2.1 (Open CPE detail)
Apache>>Openoffice >> Version 3.3.0 (Open CPE detail)
Apache>>Openoffice >> Version 3.4.0 (Open CPE detail)
Apache>>Openoffice >> Version 3.4.0 (Open CPE detail)

Libreoffice>>Libreoffice >> Version To (excluding) 3.5.5

Libreoffice>>Libreoffice >> Version - (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.2.99.2 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.2.99.3 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.3.0.1 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.3.0.2 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.3.0.3 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.3.0.4 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.3.1.1 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.3.2.1 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.3.3.1 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.3.4.1 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.3.99.1 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.3.99.2 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.3.99.3 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.3.99.4 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.3.99.5 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.3.202 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.4.0.1 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.4.0.2 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.4.1.1 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.4.2.1 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.4.2.2 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.4.2.3 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.4.6 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.4.99.0 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.4.99.1 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.4.99.2 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.4.99.3 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.5.0 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.5.0.0 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.5.0.1 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.5.0.2 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.5.0.3 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.5.1.1 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.5.1.2 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.5.2 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.5.2.1 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.5.2.2 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.5.3.1 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.5.3.2 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.5.4.1 (Open CPE detail)
Libreoffice>>Libreoffice >> Version 3.5.4.2 (Open CPE detail)

Configuraton 0

Canonical>>Ubuntu_linux >> Version 10.04

Canonical>>Ubuntu_linux >> Version 10.04 (Open CPE detail)

Canonical>>Ubuntu_linux >> Version 11.04

Canonical>>Ubuntu_linux >> Version 11.04 (Open CPE detail)

Canonical>>Ubuntu_linux >> Version 11.10

Canonical>>Ubuntu_linux >> Version 11.10 (Open CPE detail)

Canonical>>Ubuntu_linux >> Version 12.04

Canonical>>Ubuntu_linux >> Version 12.04 (Open CPE detail)

Debian>>Debian_linux >> Version 6.0

Debian>>Debian_linux >> Version 6.0 (Open CPE detail)

Debian>>Debian_linux >> Version 7.0

Debian>>Debian_linux >> Version 7.0 (Open CPE detail)

Redhat>>Enterprise_linux >> Version 6.0

Redhat>>Enterprise_linux >> Version 6.0 (Open CPE detail)
Redhat>>Enterprise_linux >> Version 6.0 (Open CPE detail)
Redhat>>Enterprise_linux >> Version 6.0 (Open CPE detail)
Redhat>>Enterprise_linux >> Version 6.0 (Open CPE detail)

Redhat>>Enterprise_linux_desktop >> Version 6.0

Redhat>>Enterprise_linux_desktop >> Version 6.0 (Open CPE detail)
Redhat>>Enterprise_linux_desktop >> Version 6.0 (Open CPE detail)
Redhat>>Enterprise_linux_desktop >> Version 6.0 (Open CPE detail)

Redhat>>Enterprise_linux_for_ibm_z_systems >> Version 6.0

Redhat>>Enterprise_linux_for_ibm_z_systems >> Version 6.0 (Open CPE detail)

Redhat>>Enterprise_linux_for_power_big_endian >> Version 6.0

Redhat>>Enterprise_linux_for_power_big_endian >> Version 6.0 (Open CPE detail)

Redhat>>Enterprise_linux_server >> Version 6.0

Redhat>>Enterprise_linux_server >> Version 6.0 (Open CPE detail)
Redhat>>Enterprise_linux_server >> Version 6.0 (Open CPE detail)
Redhat>>Enterprise_linux_server >> Version 6.0 (Open CPE detail)

Redhat>>Enterprise_linux_server_from_rhui_6 >> Version 6.0

Redhat>>Enterprise_linux_server_from_rhui_6 >> Version 6.0 (Open CPE detail)

Redhat>>Enterprise_linux_workstation >> Version 6.0

Redhat>>Enterprise_linux_workstation >> Version 6.0 (Open CPE detail)
Redhat>>Enterprise_linux_workstation >> Version 6.0 (Open CPE detail)
Redhat>>Enterprise_linux_workstation >> Version 6.0 (Open CPE detail)

References

http://secunia.com/advisories/60799
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://security.gentoo.org/glsa/glsa-201209-05.xml
Tags : vendor-advisory, x_refsource_GENTOO

https://bugzilla.redhat.com/show_bug.cgi?id=826077
Tags : x_refsource_MISC

http://www.debian.org/security/2012/dsa-2520
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.ubuntu.com/usn/USN-1536-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://rhn.redhat.com/errata/RHSA-2012-1135.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.pre-cert.de/advisories/PRE-SA-2012-05.txt
Tags : x_refsource_MISC

http://www.securityfocus.com/bid/54769
Tags : vdb-entry, x_refsource_BID

http://secunia.com/advisories/50692
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securitytracker.com/id?1027332
Tags : vdb-entry, x_refsource_SECTRACK

http://www.securitytracker.com/id?1027331
Tags : vdb-entry, x_refsource_SECTRACK

http://secunia.com/advisories/50142
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.ubuntu.com/usn/USN-1537-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://www.libreoffice.org/about-us/security/advisories/cve-2012-2665/
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/50146
Tags : third-party-advisory, x_refsource_SECUNIA

CVE-2012-2665 : Detail

CVE-2012-2665

CVE Descriptions

CVE Informations

Related Weaknesses

Metrics

EPSS

EPSS Score

EPSS Percentile

Products Mentioned

Configuraton 0

Configuraton 0

References