CVE-2012-4233
Fixed in a distro release EPSS 3%
LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.
Products: libreoffice, sun openoffice.org
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libreoffice | 1:3.5.4+dfsg-3 |
| Debian 13 | libreoffice | 1:3.5.4+dfsg-3 |
| Debian 14 | libreoffice | 1:3.5.4+dfsg-3 |
| Debian 6.0 | openoffice.org | 1:3.2.1-11+squeeze8 |