PRE-CERT has reported multiple vulnerabilities in LibreOffice, which can be exploited by malicious people to compromise a user's system.

1) An error when handling incorrect tag hierarchy within the XML ManifestImport instance can be exploited to cause a heap-based buffer overflow.

2) A boundary error when handling more PropertyValues than "PKG_SIZE_ENCR_MNFST" in a "manifest:file-entry" XML Element within the XML ManifestImport instance can be exploited to cause a heap-based buffer overflow.

3) An error in the "decodeBase64()" method within the Base64 decoder implementation when exporting an XML manifest file can be exploited to cause a heap-based buffer overflow.

Successful exploitation of the vulnerabilities may allow execution of arbitrary code, but requires tricking a user into opening a specially crafted ODF file.

The vulnerabilities are reported in versions prior to 3.5.5.

Solution
Update to version 3.5.5.

Provided and/or discovered by
Timo Warns, PRE-CERT.

Changelog
Further details available to Secunia VIM customers

Original Advisory
LibreOffice:
http://www.libreoffice.org/advisories/CVE-2012-2665/

PRE-CERT:
http://www.pre-cert.de/advisories/PRE-SA-2012-05.txt

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers