Description
LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-3-5-7&id=44bc6b5cac723b52df40fbef026e99b7119d8a69 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79730 ↗
- http://lists.opensuse.org/opensuse-updates/2012-12/msg00075.html ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79731 ↗
- http://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-3-5-7&id=6789ec4c1a9c6af84bd62e650a03226a46365d97 ↗
- http://www.openwall.com/lists/oss-security/2012/11/02/2 ↗
- http://cgit.freedesktop.org/libreoffice/binfilter/commit/?h=libreoffice-3-5-7&id=7e22ee55ffc9743692f3ddb93e59dd4427029c5b ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79728 ↗
- http://www.libreoffice.org/advisories/cve-2012-4233/ ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79732 ↗
- http://www.securityfocus.com/bid/56352 ↗
- http://www.debian.org/security/2012/dsa-2570 ↗
- http://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-3-5-7&id=8ca9fb05c9967f11670d045886438ddfa3ac02a7 ↗
- http://lists.opensuse.org/opensuse-updates/2012-11/msg00039.html ↗
- https://www.htbridge.com/advisory/HTB23106 ↗