CVE-2015-1774

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 28-04-2015 04:59

Last modified: - 07-02-2022 05:32

Total changes: - 2

Description

The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted HWP document, which triggers an out-of-bounds write.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:P/I:P/A:P

Low

Attack complexity

Network

Attack vector

Low

Availability

Low

Confidentiality

Low

Integrity

Privileges required

Scope

User interaction

6.8

Base score

8.6

6.4

Exploitability score

Impact score

Verification logic

vendor=canonical AND product=ubuntu_linux AND version=12.04 AND software_edition=lts

vendor=canonical AND product=ubuntu_linux AND version=14.04 AND software_edition=lts

vendor=canonical AND product=ubuntu_linux AND version=14.10

vendor=Debian AND product=debian_linux AND version=8.0

vendor=Debian AND product=debian_linux AND version=7.0

vendor=apache AND product=openoffice AND versionEndIncluding=4.1.1

vendor=fedoraproject AND product=fedora AND version=21

vendor=Red Hat Enterprise Linux AND product=enterprise_linux_workstation AND version=6.0

vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server AND version=6.0

vendor=Red Hat Enterprise Linux AND product=enterprise_linux_desktop AND version=6.0

vendor=libreoffice AND product=libreoffice AND versionEndIncluding=4.3.6

vendor=libreoffice AND product=libreoffice AND version=4.4.0

vendor=libreoffice AND product=libreoffice AND version=4.4.1

Reference

http://www.openoffice.org/security/cves/CVE-2015-1774.html
DSA-3236-Third Party Advisory
https://www.libreoffice.org/about-us/security/advisories/cve-2015-1774/
USN-2578-1-Third Party Advisory
1032206-Third Party Advisory, VDB Entry
1032205-Third Party Advisory, VDB Entry
FEDORA-2015-7022-Third Party Advisory
RHSA-2015:1458-Third Party Advisory
74338-Third Party Advisory, VDB Entry
GLSA-201603-05-Third Party Advisory
20150427 Multiple Vendor LibreOffice "HWPFILTER" Out Of Bounds Access Vulnerability-Third Party Advisory
openSUSE-SU-2015:0859-Third Party Advisory
FEDORA-2015-7213-Third Party Advisory

Keywords

CVE-2015-1774

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2015-1774

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures