CVE-2012-2334 Vulnerabilities related to malformed Powerpoint files
in OpenOffice.org 3.3.0

Reference: http://www.openoffice.org/security/cves/CVE-2012-2334.html

Severity: Important

Vendor: The Apache Software Foundation

Versions Affected:

OpenOffice.org 3.3 and 3.4 Beta, on all platforms.
Earlier versions may be also affected.

Description:

A review of the code in filter/source/msfilter msdffimp.cxx revealed
some unchecked memory allocations, which could be exploited via

MultiBoot Linux:

http://on-disk.com/product_info.php/products_id/1434

Included Documentation (in the DOCUMENTATION directory on the USB Flash Drive):

Over at On-Disk.com, we've had several people ask us if we would make a custom operating system for the Raspberry Pi (pictured left) like we did for the OLPC XO Laptop.

After looking at the specifications on 128 MB of memory it was concluded that there wasn't much we could do with it, then the specifications were changed to 256MB, which is something I think we can work with.

The major challlenge, is once again, overcoming the 256MB of memory.  However, in this case it's even worse because the video is shared memory of 32MB–128MB like on many laptops, so the maximum we'll have to work with is 233MB. 

On the multimedia front, the Raspberry Pi is supposed to have much better graphics, but the 700Mhz ARM cpu and 233MB of memory will make playing a variety of media from a standard desktop a real challenge.

After giving it a lot of thought, even though this presents difficult challenge, we believe it is doable, so we've decided to move forward with creating a custom OS for the Raspberry PI we are currently calling RaPi.

Available from On-Disk.com.