USN-1495-1 : libreoffice, libreoffice-l10n vulnerabilities

NASLDB: USN-1495-1 : libreoffice, libreoffice-l10n vulnerabilities

General

ID: 59832
Name: USN-1495-1 : libreoffice, libreoffice-l10n vulnerabilities

Summary: Checks dpkg output for updated package(s)

Credits: –

Classification

Risk: –

CVSS: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Base Vector: –
CVSS Temporal Vector: –

Port: 0
Family: Ubuntu Local Security Checks
Type: Local

Description

Integer overflows were discovered in the graphics loading code of
several different image types. If a user were tricked into opening a
specially crafted file, an attacker could cause LibreOffice to crash
or possibly execute arbitrary code with the privileges of the user
invoking the program. (CVE-2012-1149)

Sven Jacobi discovered an integer overflow when processing Escher
graphics records. If a user were tricked into opening a specially
crafted PowerPoint file, an attacker could cause LibreOffice to crash
or possibly execute arbitrary code with the privileges of the user
invoking the program. (CVE-2012-2334)