CVE-2012-4233

libreoffice: multiple null pointer dereference flaws

Published Nov 19, 2012 CVSS 2.0 · 4.3 Medium EPSS 3.5% KEV · Not listed
Description
LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2570-1 openoffice.org security update
EUVD EUVD EUVD-2012-4177 LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.02731}

epss

{'score': 0.02544}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 8:28 PM
Reserved
Aug 9, 2012, 12:00 AM
Status
Modified
Published
Nov 19, 2012, 12:10 PM
Modified
Jun 16, 2026, 11:44 PM
Severity
Low
Public date
Oct 31, 2012, 12:00 AM