| Package | Affected versions | Patched versions |
|---|---|---|
| koffice | = 1.2= 1.2.1= 1.3= 1.3.1= 1.3.2= 1.3.3= 1.3.4= 1.3.5= 1.4= 1.4.1= 1.4.2= 1.6.1≤ 2.3.3 |
Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3456, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free