Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3456, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.

This update fixes a buffer overflow in MS Word ODF import filter.

KDE Security Advisory reports :

A flaw has been found which can allow malicious code to take advantage of an input validation failure in the Microsoft import filter in Calligra and KOffice. Exploitation can allow the attacker to gain control of the running process and execute code on its behalf.

Includes backported patch (from calligra) for msword filter overflow.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that KOffice incorrectly handled certain malformed MS Word documents. If a user or automated system were tricked into opening a crafted MS Word file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the program.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
74723	openSUSE Security Update : koffice (openSUSE-SU-2012:1060-1)	Nessus	SuSE Local Security Checks	high
61677	FreeBSD : Calligra, KOffice -- input validation failure (aa4d3d73-ef17-11e1-b593-00269ef07d24)	Nessus	FreeBSD Local Security Checks	high
61521	Fedora 16 : koffice-2.3.3-22.fc16 (2012-11546)	Nessus	Fedora Local Security Checks	high
61484	Ubuntu 11.04 / 11.10 : koffice vulnerability (USN-1526-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2012-3455

high

Tenable Plugins

high

high

high

high