CVE-2011-2713: Buffer Overflow
A heap-based buffer out-ouf-bounds read was found in the way OpenOffice.org imported certain Microsoft Word Binary File Format (.DOC) file.If a user opened a specially-crafted DOC file in OpenOffice.org suite tool (oowriter), it could lead to denial of service (oowriter executable crash), or possibly, execute arbitrary code with the privileges of the user running OpenOffice.org Writer.
This has been assigned CVE-2011-2713.
Other sources
oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted DOC file that triggers an out-of-bounds read in the DOC sprm parser.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2713?
CVE-2011-2713 has a moderate severity level, primarily causing denial of service through application crashes.
How do I fix CVE-2011-2713?
To mitigate CVE-2011-2713, users should upgrade to a patched version of OpenOffice.org or LibreOffice that addresses this vulnerability.
Which versions of software are affected by CVE-2011-2713?
CVE-2011-2713 affects Apache OpenOffice 3.3.0 and various versions of LibreOffice leading up to 3.4.2.
What types of attacks can exploit CVE-2011-2713?
CVE-2011-2713 can be exploited by opening specially-crafted Microsoft Word .DOC files, potentially crashing the application.
Is CVE-2011-2713 still a risk for users today?
While CVE-2011-2713 is an older vulnerability, it remains a risk for users running the affected versions of the software.