Patchwire CVEs, their patch status, and feeds to follow them

CVE-2012-4233

Fixed in a distro release EPSS 3%

LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.

Published 2012-11-19 · CVE record · OSV

Products: libreoffice, sun openoffice.org

Distro releases

ReleasePackageFixed in
Debian 12libreoffice1:3.5.4+dfsg-3
Debian 13libreoffice1:3.5.4+dfsg-3
Debian 14libreoffice1:3.5.4+dfsg-3
Debian 6.0openoffice.org1:3.2.1-11+squeeze8