CVE-2012-4233

LibreOffice < 3.6 - Denial of Service via Crafted ODT, ODG, WMF, or XLS Files

Title source: llm
STIX 2.1

Description

LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.

References (15)

Core 15
Core References
Various Sources x_refsource_confirm
http://www.libreoffice.org/advisories/cve-2012-4233/
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/79730
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2012-12/msg00075.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/79731
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/11/02/2
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/79728
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/79732
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/56352
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2012/dsa-2570
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2012-11/msg00039.html
Vendor Advisory x_refsource_misc
https://www.htbridge.com/advisory/HTB23106

Scores

EPSS 0.0251
EPSS Percentile 85.6%

Details

Status published
Products (17)
libreoffice/libreoffice 3.5
libreoffice/libreoffice 3.5. rc1
libreoffice/libreoffice 3.5.0 (4 CPE variants)
libreoffice/libreoffice 3.5.1 (3 CPE variants)
libreoffice/libreoffice 3.5.2 (3 CPE variants)
libreoffice/libreoffice 3.5.3 (3 CPE variants)
libreoffice/libreoffice 3.5.4 (2 CPE variants)
libreoffice/libreoffice 3.5.5
libreoffice/libreoffice 3.5.5.1
libreoffice/libreoffice 3.5.5.2
... and 7 more
Published Nov 19, 2012
Tracked Since Feb 18, 2026