The WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org (OOo) before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report this issue as an integer overflow.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2012-06-21T15:00:00

Updated: 2024-08-06T19:26:08.516Z

Reserved: 2012-04-04T00:00:00

Link: CVE-2012-2149

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2012-06-21T15:55:12.520

Modified: 2024-11-21T01:38:36.167

Link: CVE-2012-2149

cve-icon Redhat

Severity : Important

Publid Date: 2012-05-16T00:00:00Z

Links: CVE-2012-2149 - Bugzilla