Debian Libreoffice vulnerabilities

CVE-2024-12425 [LOW] CVE-2024-12425: libreoffice - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') v... Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font files. This issue affects LibreOffice: from 24.8 before < 24.8.4.

CVE-2011-2713 [MEDIUM] CVE-2011-2713: libreoffice - oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assist... oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted DOC file that triggers an out-of-bounds read in the DOC sprm parser. Scope: local bookworm: resolved (fixed in 1:3.4.3-1) bullseye: resolved (fixed in 1:3.4.3-1) forky: resolved (fixed in 1:3.4.3-1) sid: resolved