CVE-2012-2149

CVE-2012-2149 describes a critical vulnerability in libwpd 0.8.8, specifically within the WPXContentListener::_closeTableRow function, which is utilized by OpenOffice.org (OOo) prior to version 3.4. This flaw allows remote attackers to execute arbitrary code by crafting a malicious Wordperfect .WPD document that triggers a negative array index, potentially leading to an integer overflow. The vulnerability carries a CVSS score of 7.5, indicating high severity, with an attack vector of network, low attack complexity, and no authentication required. Successful exploitation could result in partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.