CVE-2012-3455

Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document.  NOTE: this is the same vulnerability as CVE-2012-3456, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
VendorProductVersion
kdekoffice
𝑥
≤ 2.3.3
kdekoffice
1.2
kdekoffice
1.2.1
kdekoffice
1.3
kdekoffice
1.3:beta1
kdekoffice
1.3:beta2
kdekoffice
1.3:beta3
kdekoffice
1.3.1
kdekoffice
1.3.2
kdekoffice
1.3.3
kdekoffice
1.3.4
kdekoffice
1.3.5
kdekoffice
1.4
kdekoffice
1.4.1
kdekoffice
1.4.2
kdekoffice
1.6.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
koffice
zesty
dne
yakkety
dne
xenial
dne
wily
dne
vivid
dne
utopic
dne
trusty
dne
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
Fixed 1:2.3.3-0ubuntu6.1
released
natty
Fixed 1:2.3.3-0ubuntu4.1
released
lucid
ignored
hardy
ignored
wv2
zesty
dne
yakkety
dne
xenial
dne
wily
dne
vivid
not-affected
utopic
not-affected
trusty
dne
saucy
not-affected
raring
not-affected
quantal
not-affected
precise
ignored
oneiric
ignored
natty
ignored
lucid
ignored
hardy
ignored