Description
oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted DOC file that triggers an out-of-bounds read in the DOC sprm parser.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libreoffice | 1:3.4.3-1 | — |
| Debian 13 | libreoffice | 1:3.4.3-1 | — |
| Debian 12 | libreoffice | 1:3.4.3-1 | — |
| Debian 6.0 | openoffice.org | 1:3.2.1-11+squeeze4 | DSA-2315-1 |
| Debian 5.0 | openoffice.org | 1:2.4.1+dfsg-1+lenny12 | DSA-2315-1 |
Advisories 1
- DSA-2315-1 openoffice.org - multiple vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- FEDORA-2011-14036 vendor-advisory
- openSUSE-SU-2011:1143 vendor-advisory
- 49969 vdb-entry
- 60799 third-party-advisory
- GLSA-201408-19 vendor-advisory
- GLSA-201209-05 vendor-advisory
- MDVSA-2011:172 vendor-advisory
- http://www.libreoffice.org/advisories/CVE-2011-2713/
- 1026145 vdb-entry
- 50692 third-party-advisory
- 76178 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=725668
- FEDORA-2011-14049 vendor-advisory
- DSA-2315 vendor-advisory