CVE-2012-3456
Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in...
CVE-2012-3456 is a high vulnerability (CVSS 7.5) in Calligra, published August 20, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 20.1%, the 97th percentile. Fixed in calligra 1:2.4.3-2.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 20.1%EPSS, 97th percentile
- Exploitation
- None known1 public exploit
- Fixed in
1:2.4.3-2calligra +2 more
Description
Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3455, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.
Exploit likelihood
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Alligra Calligra - Heap Buffer Overflow | 2012-08-07 |
What each source reports
NVD Score used
Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3455, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.
- Record
CVE-2012-3456- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3455, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.
- Record
CVE-2012-3456- Updated
- 2026-11-02
EUVDEUVD-2012-3417No score
Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3455, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.
- Record
EUVD-2012-3417- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gmv4-h63m-hqggNo score
Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in...
Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3455, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.
- Record
GHSA-gmv4-h63m-hqgg- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVNo score
Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3455, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.
- Record
CVE-2012-3456- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-3456No score
Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3455, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.
- Record
DEBIAN-CVE-2012-3456- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
exchange.xforce.ibmcloud.com/vulnerabilities/77482
openwall.com/lists/oss-security/2012/08/10/1
lists.opensuse.org/opensuse-security-announce/2012-08/msg00026.html
Show 10 moreShow less
marc.info?l=bugtraq&m=136733075705494&w=2
media.blackhat.com/bh-us-12/Briefings/C_Miller/BH_US_12_Miller_NFC_attack_surface_WP.pdf
ubuntu.com/usn/USN-1525-1
kde.org/info/security/advisory-20120810-1.txt
secunia.com/advisories/50050
securityfocus.com/bid/54816
nvd.nist.gov/vuln/detail/CVE-2012-3456
github.com/advisories/GHSA-gmv4-h63m-hqgg
security-tracker.debian.org/tracker/CVE-2012-3456