{"id":"CVE-2012-4233","aliases":["DEBIAN-CVE-2012-4233","DSA-2570-1","EUVD-2012-4177","GHSA-238c-g57x-fg8c"],"status":"published","title":"LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote...","description":"LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03482,"percentile":0.89194,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2012-10-18T00:00:00Z","modified":"2026-10-23T17:47:51Z","fixes":[{"ecosystem":"Debian:12","package":"libreoffice","fixed_in":["1:3.5.4+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libreoffice","fixed_in":["1:3.5.4+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libreoffice","fixed_in":["1:3.5.4+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"openoffice.org","fixed_in":["1:3.2.1-11+squeeze8"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.4+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.4+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.4+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"openoffice.org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.1-11+squeeze8"}]}],"versions":["1:3.2.1-11+squeeze2","1:3.2.1-11+squeeze3","1:3.2.1-11+squeeze4","1:3.2.1-11+squeeze5","1:3.2.1-11+squeeze6","1:3.2.1-11+squeeze7"]}],"products":[{"vendor":"libreoffice","product":"libreoffice"},{"vendor":"sun","product":"openoffice.org"}],"references":[{"url":"http://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-3-5-7\u0026id=44bc6b5cac723b52df40fbef026e99b7119d8a69","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/79730","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-updates/2012-12/msg00075.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/79731","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-3-5-7\u0026id=6789ec4c1a9c6af84bd62e650a03226a46365d97","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2012/11/02/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://cgit.freedesktop.org/libreoffice/binfilter/commit/?h=libreoffice-3-5-7\u0026id=7e22ee55ffc9743692f3ddb93e59dd4427029c5b","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/79728","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://www.libreoffice.org/advisories/cve-2012-4233/","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/79732","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/56352","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.debian.org/security/2012/dsa-2570","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-3-5-7\u0026id=8ca9fb05c9967f11670d045886438ddfa3ac02a7","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-updates/2012-11/msg00039.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://www.htbridge.com/advisory/HTB23106","tags":["x_refsource_MISC","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-4233"},{"url":"http://www.libreoffice.org/advisories/cve-2012-4233"},{"url":"https://github.com/advisories/GHSA-238c-g57x-fg8c"},{"url":"https://security-tracker.debian.org/tracker/CVE-2012-4233","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2012-4233","description":"LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.","status":"published","published":"2012-11-19T11:00:00Z","modified":"2024-08-06T20:28:07.587Z","updated_at":"2026-11-02T14:34:51.937988Z"}],"euvd":[{"id":"EUVD-2012-4177","description":"LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.","status":"published","published":"2012-11-19T11:00:00Z","modified":"2024-08-06T20:28:07Z","updated_at":"2026-11-03T01:56:08.44938Z"}],"ghsa":[{"id":"GHSA-238c-g57x-fg8c","title":"LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote...","description":"LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.","status":"published","published":"2022-05-17T01:42:24Z","modified":"2025-04-11T04:04:59Z","updated_at":"2026-11-02T15:01:12.54248Z"}],"nvd":[{"id":"CVE-2012-4233","description":"LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.","status":"published","published":"2012-11-19T12:10:51.243Z","modified":"2026-06-16T23:44:40.42Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:16.536025Z"}],"osv":[{"id":"CVE-2012-4233","description":"LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.","status":"published","published":"2012-11-19T12:10:51Z","modified":"2026-04-10T03:42:25.950783Z","updated_at":"2026-11-02T15:43:58.537032Z"},{"id":"DEBIAN-CVE-2012-4233","description":"LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.","status":"published","published":"2012-11-19T12:10:51.243Z","modified":"2026-10-23T17:47:51.194745585Z","updated_at":"2026-11-02T15:45:25.218101Z"},{"id":"DSA-2570-1","title":"openoffice.org - remote","status":"published","published":"2012-10-18T00:00:00Z","modified":"2026-03-09T01:19:04.963972Z","updated_at":"2026-11-02T15:46:15.489951Z"}]}}