CVE-2011-2713
Fixed in a distro release EPSS 3%
oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted DOC file that triggers an out-of-bounds read in the DOC sprm parser.
Products: libreoffice, sun openoffice.org
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libreoffice | 1:3.4.3-1 |
| Debian 13 | libreoffice | 1:3.4.3-1 |
| Debian 14 | libreoffice | 1:3.4.3-1 |
| Debian 5.0 | openoffice.org | 1:2.4.1+dfsg-1+lenny12 |
| Debian 6.0 | openoffice.org | 1:3.2.1-11+squeeze4 |