CVE-2012-2665
Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before 3.5.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Open Document Text (.odt) file with (1) a child tag within an incorrect parent tag, (2) duplicate tags, or (3) a Base64 ChecksumAttribute whose length is not evenly divisible by four.
- EPSS
- 7.0% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- CWE
- CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:openoffice
- canonical:ubuntu_linux
- debian:debian_linux
- libreoffice:libreoffice
- redhat:enterprise_linux
- redhat:enterprise_linux_desktop
- redhat:enterprise_linux_for_ibm_z_systems
- redhat:enterprise_linux_for_power_big_endian
- redhat:enterprise_linux_server
- redhat:enterprise_linux_server_from_rhui_6
- redhat:enterprise_linux_workstation