Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2012-2334

29
FAUCET Score

CVE-2012-2334 is an integer overflow vulnerability in OpenOffice.org and LibreOffice that allows remote attackers to cause a denial of service or potentially execute arbitrary code. The vulnerability is triggered by a crafted PowerPoint document containing an excessively long Escher graphics record, leading to a buffer overflow. With a CVSS score of 6.8, it is considered a medium-severity vulnerability, requiring user interaction (opening a malicious file) but allowing for potential compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
3.3CPE matchmatch criteria
cpe:2.3:a:apache:openoffice.org:3.3:*:*:*:*:*:*:*
3.4CPE matchmatch criteria
cpe:2.3:a:apache:openoffice.org:3.4:beta:*:*:*:*:*:*
<= 3.5.2CPE matchmatch criteria
cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*
3.3.0CPE matchmatch criteria
cpe:2.3:a:libreoffice:libreoffice:3.3.0:*:*:*:*:*:*:*
3.3.1CPE matchmatch criteria
cpe:2.3:a:libreoffice:libreoffice:3.3.1:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

6.8MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Exploitability Score
8.6
Impact Score
6.4
CvssVersion
2.0

Exploit Intelligence

EPSS Score
13.04%
Probability of exploitation in next 30 days
EPSS Percentile
95.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
This CVE's current EPSS score of 0.1304 is in the 96th percentile among its peer group of 19,954 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (8)

asteriskpatch availablevia llm_extracted
Fixed in: 3.5.3
View patch
check_pointpatch availablevia llm_extracted
Fixed in: 3.5.3
View patch
denopatch availablevia llm_extracted
Fixed in: 3.4.0
View patch
libreofficepatch availablevia llm_extracted
Fixed in: 3.4.0
View patch
nessuspatch availablevia llm_extracted
Fixed in: 3.4.0
postgresqlpatch availablevia llm_extracted
Fixed in: 3.4.0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: openoffice.org-1:3.2.1-19.6.el6_2.7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: openoffice.org-1:3.1.1-19.10.el5_8.3
View patch

Vendor Advisories (7)

redhatCVE-2012-2334Important

libreoffice: Integer overflow leading to buffer overflow by processing invalid Escher graphics records length in the Powerpoint documents

May 16, 2012
asteriskllm-asterisk-bc886f53fbdeb231

Integer overflow flaw with malformed PPT files

check_pointllm-check_point-c112431a08bbaed0

Integer overflow flaw with malformed PPT files

denollm-deno-402e47b4cafa6829

Vulnerabilities related to malformed Powerpoint files in OpenOffice.org 3.3.0

postgresqlllm-postgresql-f6349661684cf02c

Vulnerabilities related to malformed Powerpoint files in OpenOffice.org 3.3.0

libreofficellm-libreoffice-7d810d22d66332dc

Vulnerabilities related to malformed Powerpoint files in OpenOffice.org 3.3.0

nessusllm-nessus-b0abe9faf6a42063

Vulnerabilities related to malformed Powerpoint files in OpenOffice.org 3.3.0

References

archives.neohapsis.com / archives/bugtraq/2012-05/0091.html
cgit.freedesktop.org / libreoffice/core/commit
ExploitPatch
cgit.freedesktop.org / libreoffice/core/commit
ExploitPatch
lists.fedoraproject.org / pipermail/package-announce/2012-June/082168.html
rhn.redhat.com / errata/RHSA-2012-0705.html
bugzilla.redhat.com / show_bug.cgi
secunia.com / advisories/46992
Vendor Advisory
secunia.com / advisories/47244
Vendor Advisory
secunia.com / advisories/49373
Vendor Advisory
secunia.com / advisories/49392
Vendor Advisory
secunia.com / advisories/60799
securitytracker.com / id
exchange.xforce.ibmcloud.com / vulnerabilities/75695
debian.org / security/2012/dsa-2487
gentoo.org / security/en/glsa/glsa-201408-19.xml
libreoffice.org / advisories/cve-2012-2334
Vendor Advisory
mandriva.com / security/advisories
mandriva.com / security/advisories
openoffice.org / security/cves/CVE-2012-2334.html
Vendor Advisory
openwall.com / lists/oss-security/2012/05/28/2
osvdb.org / 82517
securityfocus.com / bid/53570