Lucene search

K
nvd[email protected]NVD:CVE-2011-2713
HistoryOct 21, 2011 - 6:55 p.m.

CVE-2011-2713

2011-10-2118:55:00
CWE-119
web.nvd.nist.gov
10

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

High

EPSS

0.041

Percentile

92.2%

oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted DOC file that triggers an out-of-bounds read in the DOC sprm parser.

Affected configurations

Nvd
Node
libreofficelibreofficeRangeโ‰ค3.4.2
OR
libreofficelibreofficeMatch3.3.0
OR
libreofficelibreofficeMatch3.3.1
OR
libreofficelibreofficeMatch3.3.2
OR
libreofficelibreofficeMatch3.3.3
OR
libreofficelibreofficeMatch3.3.4
OR
libreofficelibreofficeMatch3.4.0
OR
libreofficelibreofficeMatch3.4.1
OR
sunopenoffice.orgMatch3.3.0
VendorProductVersionCPE
libreofficelibreoffice*cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*
libreofficelibreoffice3.3.0cpe:2.3:a:libreoffice:libreoffice:3.3.0:*:*:*:*:*:*:*
libreofficelibreoffice3.3.1cpe:2.3:a:libreoffice:libreoffice:3.3.1:*:*:*:*:*:*:*
libreofficelibreoffice3.3.2cpe:2.3:a:libreoffice:libreoffice:3.3.2:*:*:*:*:*:*:*
libreofficelibreoffice3.3.3cpe:2.3:a:libreoffice:libreoffice:3.3.3:*:*:*:*:*:*:*
libreofficelibreoffice3.3.4cpe:2.3:a:libreoffice:libreoffice:3.3.4:*:*:*:*:*:*:*
libreofficelibreoffice3.4.0cpe:2.3:a:libreoffice:libreoffice:3.4.0:*:*:*:*:*:*:*
libreofficelibreoffice3.4.1cpe:2.3:a:libreoffice:libreoffice:3.4.1:*:*:*:*:*:*:*
sunopenoffice.org3.3.0cpe:2.3:a:sun:openoffice.org:3.3.0:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

High

EPSS

0.041

Percentile

92.2%