CVE Feed

    Dashboard / CVE / CVE-2012-4233

    CVE-2012-4233

    LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted (1) odt file to vcllo.dll, (2) ODG (Drawing document) file to svxcorelo.dll, (3) PolyPolygon record in a .wmf (Window Meta File) file embedded in a ppt (PowerPoint) file to tllo.dll, or (4) xls (Excel) file to scfiltlo.dll.

    Published:Oct 31, 2012
    Last Modified:Apr 11, 2025
    EPS:Nov 19, 2012
    EPSS Score:0.02511
    CVSS Score:4.3

    Affected Products

    Vendor
    Libreoffice
    Product
    Libreoffice
    Vendor
    Sun
    Product
    Openoffice.org

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-476 NULL Pointer Dereference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-4430 (CVSS 5.4) — Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mism…
    CVE-2025-14714 (CVSS 0.9) — An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inhe…
    CVE-2025-2866 (CVSS 2.4) — Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by…
    CVE-2025-1080 (CVSS 7.2) — LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server…
    CVE-2025-0514 (CVSS 7.2) — Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyper…
    CVE-2024-12426 (CVSS 6.7) — Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in Th…
    CVE-2024-12425 (CVSS 2.4) — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document F…
    CVE-2024-7788 (CVSS 7.8) — Improper Digital Signature Invalidation  vulnerability in Zip Repair Mode of The Document Foundation LibreOffi…
    CVE-2024-6472 (CVSS 7.8) — Certificate Validation user interface in LibreOffice allows potential vulnerability. Signed macros are scr…
    CVE-2024-5261 (CVSS 10) — Improper Certificate Validation vulnerability in LibreOffice "LibreOfficeKit" mode disables TLS certification …

    References

    http://cgit.freedesktop.org/libreoffice/binfilter/commit/?h=libreoffice-3-5-7&id=7e22ee55ffc9743692f3ddb93e59dd4427029c5b
    http://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-3-5-7&id=44bc6b5cac723b52df40fbef026e99b7119d8a69
    http://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-3-5-7&id=6789ec4c1a9c6af84bd62e650a03226a46365d97
    http://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-3-5-7&id=8ca9fb05c9967f11670d045886438ddfa3ac02a7
    http://lists.opensuse.org/opensuse-updates/2012-11/msg00039.html
    http://lists.opensuse.org/opensuse-updates/2012-12/msg00075.html
    http://www.debian.org/security/2012/dsa-2570
    http://www.libreoffice.org/advisories/cve-2012-4233/
    http://www.openwall.com/lists/oss-security/2012/11/02/2
    http://www.securityfocus.com/bid/56352
    https://exchange.xforce.ibmcloud.com/vulnerabilities/79728
    https://exchange.xforce.ibmcloud.com/vulnerabilities/79730
    https://exchange.xforce.ibmcloud.com/vulnerabilities/79731
    https://exchange.xforce.ibmcloud.com/vulnerabilities/79732
    https://www.htbridge.com/advisory/HTB23106
    http://cgit.freedesktop.org/libreoffice/binfilter/commit/?h=libreoffice-3-5-7&id=7e22ee55ffc9743692f3ddb93e59dd4427029c5b
    http://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-3-5-7&id=44bc6b5cac723b52df40fbef026e99b7119d8a69
    http://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-3-5-7&id=6789ec4c1a9c6af84bd62e650a03226a46365d97
    http://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-3-5-7&id=8ca9fb05c9967f11670d045886438ddfa3ac02a7
    http://lists.opensuse.org/opensuse-updates/2012-11/msg00039.html
    http://lists.opensuse.org/opensuse-updates/2012-12/msg00075.html
    http://www.debian.org/security/2012/dsa-2570
    http://www.libreoffice.org/advisories/cve-2012-4233/
    http://www.openwall.com/lists/oss-security/2012/11/02/2
    http://www.securityfocus.com/bid/56352
    https://exchange.xforce.ibmcloud.com/vulnerabilities/79728
    https://exchange.xforce.ibmcloud.com/vulnerabilities/79730
    https://exchange.xforce.ibmcloud.com/vulnerabilities/79731
    https://exchange.xforce.ibmcloud.com/vulnerabilities/79732
    https://www.htbridge.com/advisory/HTB23106

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High