CVE-2011-2713 oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted DOC file that triggers an out-of-bounds read in t...
MediumCVSS 4.3
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted DOC file that triggers an out-of-bounds read in the DOC sprm parser.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libreoffice(Debian:12) | < 1:3.4.3-1 | 1:3.4.3-1 |
| debian/libreoffice(Debian:13) | < 1:3.4.3-1 | 1:3.4.3-1 |
| debian/libreoffice(Debian:14) | < 1:3.4.3-1 | 1:3.4.3-1 |
| libreoffice | <= 3.4.2 | No fix listed |
| libreoffice | = 3.3.0 | No fix listed |
| libreoffice | = 3.3.1 | No fix listed |
| libreoffice | = 3.3.2 | No fix listed |
| libreoffice | = 3.3.3 | No fix listed |
| libreoffice | = 3.3.4 | No fix listed |
| libreoffice | = 3.4.0 | No fix listed |
| libreoffice | = 3.4.1 | No fix listed |
| sun openoffice.org | = 3.3.0 | No fix listed |
References
- Debian Security Tracker CVE-2011-2713 vendor-advisory
- FEDORA-2011-14036 vendor-advisory
- FEDORA-2011-14049 patch vendor-advisory
- openSUSE-SU-2011:1143 vendor-advisory
- 76178 vdb-entry
- 50692 third-party-advisory
- 60799 third-party-advisory
- GLSA-201209-05 vendor-advisory
- DSA-2315 vendor-advisory
- GLSA-201408-19 vendor-advisory
- www.libreoffice.org vendor-advisory
- MDVSA-2011:172 vendor-advisory
- 49969 vdb-entry
- 1026145 vdb-entry
- bugzilla.redhat.com patch