CVE-2012-1149

CVE-2012-1149 describes an integer overflow vulnerability in the vclmi.dll module of OpenOffice.org and LibreOffice, affecting versions 3.3, 3.4 Beta, and earlier, and LibreOffice before 3.5.3. This flaw allows remote attackers to trigger a denial of service and potentially execute arbitrary code through a specially crafted embedded image, such as a JPEG in a .DOC file, leading to a heap-based buffer overflow. With a CVSS score of 7.5, this vulnerability is considered high severity due to its network-based attack vector, low access complexity, and potential for partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.