Published: 19/11/2012 Updated: 29/08/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

LibreOffice 3.5.x prior to 3.5.7.2 and 3.6.x prior to 3.6.1, and OpenOffice.org (OOo), allows remote malicious users to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libreoffice libreoffice 3.5.0
libreoffice libreoffice 3.5.3
libreoffice libreoffice 3.5.1
libreoffice libreoffice 3.5.4
libreoffice libreoffice 3.5.
libreoffice libreoffice 3.5.6
libreoffice libreoffice 3.5.6.1
libreoffice libreoffice 3.5.2
libreoffice libreoffice 3.5.5
libreoffice libreoffice 3.5.5.1
sun openoffice.org -
libreoffice libreoffice 3.5.6.2
libreoffice libreoffice 3.5.6.3
libreoffice libreoffice
libreoffice libreoffice 3.5
libreoffice libreoffice 3.5.5.2
libreoffice libreoffice 3.5.5.3

High-Tech Bridge SA Security Research Lab discovered multiple null-pointer dereferences based vulnerabilities in OpenOfficeorg which could cause application crash or even arbitrary code execution using specially crafted files Affected file types are LWP (Lotus Word Pro), ODG, PPT (PowerPoint 2003) and XLS (Excel 2003) For the stable distribution ...

NVD-CWE-Other http://www.debian.org/security/2012/dsa-2570 http://www.openwall.com/lists/oss-security/2012/11/02/2 http://cgit.freedesktop.org/libreoffice/binfilter/commit/?h=libreoffice-3-5-7&id=7e22ee55ffc9743692f3ddb93e59dd4427029c5b https://www.htbridge.com/advisory/HTB23106 http://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-3-5-7&id=8ca9fb05c9967f11670d045886438ddfa3ac02a7 http://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-3-5-7&id=44bc6b5cac723b52df40fbef026e99b7119d8a69 http://www.libreoffice.org/advisories/cve-2012-4233/http://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-3-5-7&id=6789ec4c1a9c6af84bd62e650a03226a46365d97 http://www.securityfocus.com/bid/56352 http://lists.opensuse.org/opensuse-updates/2012-11/msg00039.html http://lists.opensuse.org/opensuse-updates/2012-12/msg00075.html https://exchange.xforce.ibmcloud.com/vulnerabilities/79732 https://exchange.xforce.ibmcloud.com/vulnerabilities/79731 https://exchange.xforce.ibmcloud.com/vulnerabilities/79730 https://exchange.xforce.ibmcloud.com/vulnerabilities/79728 https://nvd.nist.gov https://www.debian.org/security/./dsa-2570

CVE-2012-4233

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect