CVE-2013-4156

libreoffice: NULL pointer dereference when parsing certain DOCM documents

Loading…

Severity

Unknown

Red Hat Product Security

4.3

CVSS 2.0

Review impact separately from score.

Published · July 26, 2013

Updated · November 21, 2025

Description

Apache OpenOffice.org (OOo) before 4.0 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted element in an OOXML document file.

Statement

We do not consider a denial of service flaw in a client application such as OpenOffice to be a security issue.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 2.0 · 4.3
AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-476 · NULL Pointer Dereference