Unscored severity · published Jul 21, 2011
CVE-2011-2685
Stack-based buffer overflow in the Lotus Word Pro import filter in LibreOffice before 3.3.3 allows remote attackers to execute arbitrary code via a crafted .lwp file
–
CVSS
7%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the Lotus Word Pro import filter in LibreOffice before 3.3.3 allows remote attackers to execute arbitrary code via a crafted .lwp file.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.0% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libreoffice · Libreoffice
through 3.3.2; 3.3.0; 3.3.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2685
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2685
Patch
http://cgit.freedesktop.org/libreoffice/filters/commit/?id=278831e37a23e9e2e29ca811c3a5398b7c67464d
Patch
http://cgit.freedesktop.org/libreoffice/filters/commit/?id=d93fa011d713100775cd3ac88c468b6830d48877
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2011-10/msg00019.html
Patch
http://www.kb.cert.org/vuls/id/953183
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2011:172
www.openwall.com
http://www.openwall.com/lists/oss-security/2011/07/06/13
More from Libreoffice
9.8
CVE-2024-5261
Improper Certificate Validation vulnerability in LibreOffice "LibreOfficeKit" mode disables TLS certification verification LibreOfficeKit can be used for accessing LibreOffice…
9.8
CVE-2019-9855
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is…
9.8
CVE-2019-9851
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is…
9.8
CVE-2019-9850
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is…
9.8
CVE-2019-9848
LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc