CVE-2012-4233 LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.d...
MediumCVSS 4.3
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libreoffice(Debian:12) | < 1:3.5.4+dfsg-3 | 1:3.5.4+dfsg-3 |
| debian/libreoffice(Debian:13) | < 1:3.5.4+dfsg-3 | 1:3.5.4+dfsg-3 |
| debian/libreoffice(Debian:14) | < 1:3.5.4+dfsg-3 | 1:3.5.4+dfsg-3 |
| libreoffice | <= 3.6 | No fix listed |
| libreoffice | = 3.5 | No fix listed |
| libreoffice | = 3.5.-rc1 | No fix listed |
| libreoffice | = 3.5.0 | No fix listed |
| libreoffice | = 3.5.0-rc1 | No fix listed |
| libreoffice | = 3.5.0-rc2 | No fix listed |
| libreoffice | = 3.5.0-rc3 | No fix listed |
| libreoffice | = 3.5.1 | No fix listed |
| libreoffice | = 3.5.1-rc1 | No fix listed |
| libreoffice | = 3.5.1-rc2 | No fix listed |
| libreoffice | = 3.5.2 | No fix listed |
| libreoffice | = 3.5.2-rc1 | No fix listed |
| libreoffice | = 3.5.2-rc2 | No fix listed |
| libreoffice | = 3.5.3 | No fix listed |
| libreoffice | = 3.5.3-rc1 | No fix listed |
| libreoffice | = 3.5.3-rc2 | No fix listed |
| libreoffice | = 3.5.4 | No fix listed |
| libreoffice | = 3.5.4-rc2 | No fix listed |
| libreoffice | = 3.5.5 | No fix listed |
| libreoffice | = 3.5.5.1 | No fix listed |
| libreoffice | = 3.5.5.2 | No fix listed |
| libreoffice | = 3.5.5.3 | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| libreoffice | = 3.5.6 | No fix listed |
| libreoffice | = 3.5.6.1 | No fix listed |
| libreoffice | = 3.5.6.2 | No fix listed |
| libreoffice | = 3.5.6.3 | No fix listed |
| sun openoffice.org | All versions | No fix listed |
References
- Debian Security Tracker CVE-2012-4233 vendor-advisory
- cgit.freedesktop.org
- cgit.freedesktop.org
- cgit.freedesktop.org
- cgit.freedesktop.org
- openSUSE-SU-2012:1523 vendor-advisory
- openSUSE-SU-2012:1686 vendor-advisory
- DSA-2570 vendor-advisory
- www.libreoffice.org
- [oss-security] 20121102 Re: CVE-2012-4233: multiple null pointer dereference flaws in LibreOffice/OpenOffice.org mailing-list
- 56352 vdb-entry
- libreoffice-odt-dos(79728) vdb-entry
- libreoffice-svxcorelo-dos(79730) vdb-entry
- libreoffice-ppt-file-dos(79731) vdb-entry
- libreoffice-xls-dos(79732) vdb-entry
- www.htbridge.com