CVE-2011-2685 describes a stack-based buffer overflow vulnerability in the Lotus Word Pro import filter of LibreOffice versions prior to 3.3.3. This flaw allows remote attackers to execute arbitrary code by tricking a user into opening a specially crafted .lwp file. With a CVSS score of 9.3, this vulnerability is critical, indicating a network-based attack with medium complexity that could lead to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 3.3.2CPE matchmatch criteria | cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:* | ||
3.3.0CPE matchmatch criteria | cpe:2.3:a:libreoffice:libreoffice:3.3.0:*:*:*:*:*:*:* | ||
3.3.1CPE matchmatch criteria | cpe:2.3:a:libreoffice:libreoffice:3.3.1:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
filter): Multiple stack buffer overflows when processing certain LWP files (VU#953183)
Jun 22, 2011Multiple vulnerabilities in the 'Lotus Word Pro' (lwp) file format importer
Multiple vulnerabilities in the 'Lotus Word Pro' (lwp) file format importer