CVE-2012-2665

Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before 3.5.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Open Document Text (.odt) file with (1) a child tag within an incorrect parent tag, (2) duplicate tags, or (3) a Base64 ChecksumAttribute whose length is not evenly divisible by four.

• CWE-787

• http://rhn.redhat.com/errata/RHSA-2012-1135.htmlThird Party Advisory
• http://secunia.com/advisories/50142Broken Link
• http://secunia.com/advisories/50146Broken Link
• http://secunia.com/advisories/50692Broken Link
• http://secunia.com/advisories/60799Broken Link
• http://security.gentoo.org/glsa/glsa-201209-05.xmlThird Party Advisory
• http://www.debian.org/security/2012/dsa-2520Third Party Advisory
• http://www.gentoo.org/security/en/glsa/glsa-201408-19.xmlThird Party Advisory
• http://www.libreoffice.org/about-us/security/advisories/cve-2012-2665/Vendor Advisory
• http://www.pre-cert.de/advisories/PRE-SA-2012-05.txtThird Party Advisory
• http://www.securityfocus.com/bid/54769Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1027331Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1027332Broken Link, Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1536-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-1537-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=826077Issue Tracking, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1135.htmlThird Party Advisory
• http://secunia.com/advisories/50142Broken Link
• http://secunia.com/advisories/50146Broken Link
• http://secunia.com/advisories/50692Broken Link
• http://secunia.com/advisories/60799Broken Link
• http://security.gentoo.org/glsa/glsa-201209-05.xmlThird Party Advisory
• http://www.debian.org/security/2012/dsa-2520Third Party Advisory
• http://www.gentoo.org/security/en/glsa/glsa-201408-19.xmlThird Party Advisory
• http://www.libreoffice.org/about-us/security/advisories/cve-2012-2665/Vendor Advisory
• http://www.pre-cert.de/advisories/PRE-SA-2012-05.txtThird Party Advisory
• http://www.securityfocus.com/bid/54769Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1027331Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1027332Broken Link, Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1536-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-1537-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=826077Issue Tracking, Third Party Advisory

Published

Aug 6, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-2659Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2012-2660actionpack/lib/action_dispatch/http/request.rb in Ruby on Ra…
• CVE-2012-2661The Active Record component in Ruby on Rails 3.0.x before 3.…
• CVE-2012-2662Multiple cross-site scripting (XSS) vulnerabilities in Red H…
• CVE-2012-2663extensions/libxt_tcp.c in iptables through 1.4.21 does not m…
• CVE-2012-2664The sosreport utility in the Red Hat sos package before 2.2-…
• CVE-2012-2666golang/go in 1.0.2 fixes all.bash on shared machines. dotest…9.8
• CVE-2012-2667Session fixation vulnerability in lib/user/sfBasicSecurityUs…
• CVE-2012-2668libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and e…
• CVE-2012-2669The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd,…
• CVE-2012-2670manageuser.php in Collabtive before 0.7.6 allows remote auth…
• CVE-2012-2671The Rack::Cache rubygem 0.3.0 through 1.1 caches Set-Cookie …