CVE-2012-2149

描述

The WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org (OOo) before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report this issue as an integer overflow.

如何修補 CVE-2012-2149

要修補 CVE-2012-2149,請將受影響套件升級到下列已修補版本。

• Debian/libwpd—升級至 0.8.14-1 或更新版本

CVE-2012-2149 正在被利用嗎?

中等 — EPSS 為 13.4%,可持續追蹤但非最高優先。

受影響套件(1)

• from 0, < 0.8.14-1

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2012-2149