4.3
CVSSv2

CVE-2011-2713

Published: 21/10/2011 Updated: 24/10/2014
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

oowriter in OpenOffice.org 3.3.0 and LibreOffice prior to 3.4.3 allows user-assisted remote malicious users to cause a denial of service (crash) via a crafted DOC file that triggers an out-of-bounds read in the DOC sprm parser.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libreoffice libreoffice 3.3.2

libreoffice libreoffice 3.3.3

sun openoffice.org 3.3.0

libreoffice libreoffice 3.4.1

libreoffice libreoffice

libreoffice libreoffice 3.3.0

libreoffice libreoffice 3.3.1

libreoffice libreoffice 3.3.4

libreoffice libreoffice 3.4.0

Vendor Advisories

OpenOfficeorg could be made to crash or potentially run programs as your login if it opened a specially crafted file ...