← Vulnerability feed

Vulnerability record · CVE-2012-3455 · published 20 August 2012

CVE-2012-3455: Kde koffice memory buffer overflow vulnerability

Kde · Koffice

Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3456, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.

7.5 CVSS 2.0 High EPSS 5.3% · top 7.7% CWE-119 · Memory buffer overflow
7.5CVSS 2.0 base score
5.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
24References
16 Jun 2026Last modified by NVD

Description

Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3456, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://lists.opensuse.org/opensuse-updates/2012-08/msg00040.html
http://media.blackhat.com/bh-us-12/Briefings/C_Miller/BH_US_12_Miller_NFC_attack_surface_WP.pdf
http://secunia.com/advisories/50199 Vendor Advisory
http://www.kde.org/info/security/advisory-20120810-1.txt
http://www.openwall.com/lists/oss-security/2012/08/04/1
http://www.openwall.com/lists/oss-security/2012/08/04/5
http://www.openwall.com/lists/oss-security/2012/08/06/1
http://www.openwall.com/lists/oss-security/2012/08/06/6
http://www.openwall.com/lists/oss-security/2012/08/10/1
http://www.securityfocus.com/bid/54816
http://www.ubuntu.com/usn/USN-1526-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/77483
http://lists.opensuse.org/opensuse-updates/2012-08/msg00040.html
http://media.blackhat.com/bh-us-12/Briefings/C_Miller/BH_US_12_Miller_NFC_attack_surface_WP.pdf
http://secunia.com/advisories/50199 Vendor Advisory
http://www.kde.org/info/security/advisory-20120810-1.txt
http://www.openwall.com/lists/oss-security/2012/08/04/1
http://www.openwall.com/lists/oss-security/2012/08/04/5
http://www.openwall.com/lists/oss-security/2012/08/06/1
http://www.openwall.com/lists/oss-security/2012/08/06/6
http://www.openwall.com/lists/oss-security/2012/08/10/1
http://www.securityfocus.com/bid/54816
http://www.ubuntu.com/usn/USN-1526-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/77483

Track CVE-2012-3455 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2005-3625Easy software products cups vulnerabilityXpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of servic…EPSS 3.8%10.0CVE-2004-0888Easy software products cups vulnerabilityMultiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to …EPSS 9.5%10.0CVE-2004-0889Easy software products cups vulnerabilityMultiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (cras…EPSS 6.2%7.5CVE-2005-2971Kde koffice vulnerabilityHeap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted …EPSS 6.4%7.5CVE-2005-0206Ascii ptex vulnerabilityThe patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributi…EPSS 3.0%6.8CVE-2006-6120Kde koffice vulnerabilityInteger overflow in the KPresenter import filter for Microsoft PowerPoint files (filters/olefilters/lib/klaola.cc) in KOffice before 1.6.1 allows use…EPSS 4.2%5.0CVE-2005-3624Easy software products cups vulnerabilityThe CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attac…EPSS 2.3%5.0CVE-2005-3626Easy software products cups vulnerabilityXpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of servic…EPSS 3.4%

Source: NIST National Vulnerability Database (record CVE-2012-3455), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.