PT-2015-2733 · Document Foundation+5 · Libreoffice+6

Federico Scrinzi

·

Publicado

2015-10-10

·

Atualizado

2024-06-15

·

CVE-2015-4551

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions LibreOffice versions prior to 4.4.5 Apache OpenOffice versions prior to 4.1.2
Description The issue allows remote attackers to obtain sensitive information via a crafted document, which embeds data from local files into Calc or Writer. This is due to the use of stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling links.
Recommendations For LibreOffice versions prior to 4.4.5, update to version 4.4.5 or later. For Apache OpenOffice versions prior to 4.1.2, update to version 4.1.2 or later. As a temporary workaround, consider restricting the use of the LinkUpdateMode configuration to minimize the risk of exploitation.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2015-12098
CESA-2015_2619
CVE-2015-4551
DSA-3394-1
MGASA-2015-0441
OPENSUSE-SU-2024:10006-1
RHSA-2015:2619
RHSA-2015_2619
SUSE-SU-2015:1915-1
SUSE-SU-2016:0324-1
USN-2793-1

Produtos afetados

Apache Openoffice
Centos
Libreoffice
Openoffice
Red Hat
Suse
Ubuntu