CVE-2012-4233
LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote...
CVE-2012-4233 is a medium vulnerability (CVSS 4.3) in Libreoffice, published October 18, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.48%, the 89th percentile. Fixed in libreoffice 1:3.5.4+dfsg-3.
LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.
Exploit likelihood
What each source reports
NVD Score used
LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.
- Record
CVE-2012-4233- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.
- Record
CVE-2012-4233- Updated
- 2026-11-02
EUVDEUVD-2012-4177 No score
LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.
- Record
EUVD-2012-4177- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-238c-g57x-fg8c No score
LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote...
LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.
- Record
GHSA-238c-g57x-fg8c- Updated
- 2026-11-02
OSV No score
LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.
- Record
CVE-2012-4233- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-4233 No score
LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.
- Record
DEBIAN-CVE-2012-4233- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libreofficeDebian:12 |
before 1:3.5.4+dfsg-3 | 1:3.5.4+dfsg-3 |
libreofficeDebian:13 |
before 1:3.5.4+dfsg-3 | 1:3.5.4+dfsg-3 |
libreofficeDebian:14 |
before 1:3.5.4+dfsg-3 | 1:3.5.4+dfsg-3 |
openoffice.orgDebian:6.0 |
before 1:3.2.1-11+squeeze8, plus listed versions 1:3.2.1-11+squeeze21:3.2.1-11+squeeze31:3.2.1-11+squeeze41:3.2.1-11+squeeze51:3.2.1-11+squeeze61:3.2.1-11+squeeze7 |
1:3.2.1-11+squeeze8 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
cgit.freedesktop.org/libreoffice/core/commit?h=libreoffice-3-5-7&id=44bc6b5cac723b52df40fbef026e99b7119d8a69
exchange.xforce.ibmcloud.com/vulnerabilities/79730
lists.opensuse.org/opensuse-updates/2012-12/msg00075.html
openwall.com/lists/oss-security/2012/11/02/2
Show 12 moreShow less
libreoffice.org/advisories/cve-2012-4233
securityfocus.com/bid/56352
debian.org/security/2012/dsa-2570
htbridge.com/advisory/HTB23106
nvd.nist.gov/vuln/detail/CVE-2012-4233
github.com/advisories/GHSA-238c-g57x-fg8c
security-tracker.debian.org/tracker/CVE-2012-4233