CVE-2011-2713

Description

oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted DOC file that triggers an out-of-bounds read in the DOC sprm parser.

Risk Information

Base Score

6.5

MODERATE

Vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

1.541

Associated Vulnerability

Vulnerability	OS Platform
Upgrade LibreOffice (x64) 3.4.2 to latest version	Windows
Upgrade libreoffice 3.4.2 to latest version	Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-343131	LibreOffice (x64) (24.8.3)
PATCH-343130	LibreOffice (24.8.3)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234