CVE-2011-2685 Stack-based buffer overflow in the Lotus Word Pro import filter in LibreOffice before 3.3.3 allows remote attackers to execute arbitrary code via a crafted .lwp file.
HighCVSS 9.3
EPSS 7.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the Lotus Word Pro import filter in LibreOffice before 3.3.3 allows remote attackers to execute arbitrary code via a crafted .lwp file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libreoffice(Debian:12) | < 1:3.3.3-1 | 1:3.3.3-1 |
| debian/libreoffice(Debian:13) | < 1:3.3.3-1 | 1:3.3.3-1 |
| debian/libreoffice(Debian:14) | < 1:3.3.3-1 | 1:3.3.3-1 |
| libreoffice | <= 3.3.2 | No fix listed |
| libreoffice | = 3.3.0 | No fix listed |
| libreoffice | = 3.3.1 | No fix listed |
References
- Debian Security Tracker CVE-2011-2685 vendor-advisory
- cgit.freedesktop.org patch
- cgit.freedesktop.org patch
- openSUSE-SU-2011:1143 vendor-advisory
- VU#953183 patch third-party-advisory us-government-resource
- MDVSA-2011:172 vendor-advisory
- [oss-security] 20110706 libreoffice/openoffice.org CVE id request mailing-list
- [oss-security] 20110712 Re: libreoffice/openoffice.org CVE id request mailing-list