CVE-2012-2665

CVE-2012-2665 affects OpenOffice.org and LibreOffice prior to 3.5.5. The issue is a heap-based buffer overflow in the XML manifest encryption tag parsing when processing Open Document Text (.odt) files. An attacker could craft an ODT with (1) a child tag under an incorrect parent, (2) duplicate t...

CVE-2012-0037

The CVE-2012-0037 issue affects Redland Raptor (libraptor) and is triggered when parsing RDF/XML with an XXE declaration. The vulnerability allows user-assisted remote attackers to read arbitrary files via crafted RDF documents, as observed in libraptor versions used by OpenOffice/LibreOffice lin...