I'm not sure wether this helps anyone, but attached you find a stacktrace showing that the crash seems to be a SIGSEV in WW8_SdrAttrIter::OutParaAttr
I'm not sure wether this helps anyone, but attached you find a stacktrace showing that the crash seems to be a SIGSEV in WW8_SdrAttrIter ::OutParaAttr