Accuvant Labs has reported a vulnerability in Calligra, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error within the "read()" function (filters/words/msword-odf/wv2/src/styles.cpp) when parsing ODF styles and can be exploited to cause a heap-based buffer overflow.

Successful exploitation may allow execution of arbitrary code, but requires tricking a user into opening a specially crafted ODF file.

The vulnerability is reported in versions 2.4.3 and prior.

Solution
Fixed in the GIT repository.

Provided and/or discovered by
Charlie Miller, Accuvant Labs

Changelog
Further details available to Secunia VIM customers

Original Advisory
KDE:
http://www.kde.org/info/security/advisory-20120810-1.txt

Charlie Miller:
http://media.blackhat.com/bh-us-12/Briefings/C_Miller/BH_US_12_Miller_NFC_attack_surface_WP.pdf

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers