CVE-2012-4233

LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org OOo, allows remote attackers to cause a denial of service NULL pointer dereference via a crafted 1 odt file to vcllo.dll, 2 ODG Drawing document file to svxcorelo.dll, 3 PolyPolygon record in a .wmf Window Meta File file...

CVE-2012-4233

CVE-2012-4233 affects LibreOffice 3.5.x (before 3.5.7.2) and 3.6.x (before 3.6.1), and OpenOffice.org, enabling remote denial of service via crafted files. The vulnerability is a NULL pointer dereference triggered when processing specific embedded content: (1) odt to vcllo.dll, (2) ODG to svxcore...

Multiple Vulnerabilities in LibreOffice

Advisory ID: HTB23106 Product: LibreOffice Suite Vendor: LibreOffice Vulnerable Versions: 3.5.5.3 and probably prior Tested Version: 3.5.5.3 Vendor Notification: July 26, 2012 Public Disclosure: October 31, 2012 Vulnerability Type: NULL Pointer Dereference CWE-476 CVE Reference: CVE-2012-4233...

OpenOffice / LibreOffice DoS

NULL pointer dereference on different formats parsing...

SuSE 10 Security Update : LibreOffice (ZYPP Patch Number 8286)

LibreOffice was updated to SUSE 3.5 bugfix release 13 based on upstream 3.5.6-rc2 which fixes a lot of bugs. The following bugs have been fixed : - polygon fill rule. bnc759172 - open XML in Writer. bnc777181 - undo in text objects fdo36138 - broken numbering level. bnc760019 - better MathML...

Gentoo Security Advisory GLSA 201209-05 (libreoffice)

The remote host is missing updates announced in advisory GLSA 201209-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201209-05 (libreoffice)

The remote host is missing updates announced in advisory GLSA 201209-05. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

GLSA-201209-05 : LibreOffice: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201209-05 LibreOffice: Multiple vulnerabilities Multiple vulnerabilities have been found in LibreOffice: The Microsoft Word Document parser contains an out-of-bounds read error CVE-2011-2713. The Raptor RDF parser contains an XML...

LibreOffice: Multiple vulnerabilities

Background LibreOffice is a full office productivity suite. Description Multiple vulnerabilities have been found in LibreOffice: The Microsoft Word Document parser contains an out-of-bounds read error CVE-2011-2713. The Raptor RDF parser contains an XML External Entity expansion error...

Mandriva Linux Security Advisory : libreoffice (MDVSA-2012:091)

Security issues were identified and fixed in libreoffice : An integer overflow vulnerability in the libreoffice graphic loading code could allow a remote attacker to cause a denial of service application crash or potentially execute arbitrary code CVE-2012-1149. An integer overflow flaw, leading ...

Mandriva Linux Security Advisory : libreoffice (MDVSA-2012:123)

A Security issue was identified and fixed in libreoffice : Multiple heap-based buffer overflow flaws were found in the XML manifest encryption tag parsing code of LibreOffice. An attacker could create a specially crafted file in the Open Document Format for Office Applications ODF format which wh...

Mandriva Linux Security Advisory : libreoffice (MDVSA-2012:063)

An XML External Entity expansion flaw was found in the way Raptor processed RDF files. If an application linked against Raptor were to open a specially crafted RDF file, it could possibly allow a remote attacker to obtain a copy of an arbitrary local file that the user running the application had...

Mandriva Linux Security Advisory : libreoffice (MDVSA-2011:172)

Multiple vulnerabilies has been discovered and corrected in libreoffice : Stack-based buffer overflow in the Lotus Word Pro import filter in LibreOffice before 3.3.3 allows remote attackers to execute arbitrary code via a crafted .lwp file CVE-2011-2685. oowriter in OpenOffice.org 3.3.0 and...

Debian: Security Advisory (DSA-2487-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[BSA 076] Security update for libreoffice

Rene Engelhard uploaded new packages for libreoffice which fixed the following security problems: CVE-2012-1149 multiple heap-based buffer overflows in OpenOffice.orgs XML manifest encryption tag parsing code For the squeeze-backports distribution the problems have been fixed in version...

[BSA 076] Security update for libreoffice

Rene Engelhard uploaded new packages for libreoffice which fixed the following security problems: CVE-2012-1149 multiple heap-based buffer overflows in OpenOffice.orgs XML manifest encryption tag parsing code For the squeeze-backports distribution the problems have been fixed in version...

Ubuntu Update for libreoffice USN-1536-1

Ubuntu Update for Linux kernel vulnerabilities USN-1536-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN15361.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for libreoffice USN-1536-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net...

Ubuntu 11.04 / 11.10 / 12.04 LTS : libreoffice vulnerability (USN-1536-1)

It was discovered that LibreOffice incorrectly handled certain encryption tags in Open Document Text .odt files. If a user were tricked into opening a specially crafted file, an attacker could cause LibreOffice to crash or possibly execute arbitrary code with the privileges of the user invoking t...

Ubuntu: Security Advisory (USN-1536-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libreoffice FEDORA-2012-11402

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...