PT-2015-2736 · Document Foundation+5 · Libreoffice+6
Publicado
2015-10-10
·
Atualizado
2024-06-15
·
CVE-2015-5212
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
LibreOffice versions prior to 4.4.5
Apache OpenOffice versions prior to 4.1.2
Description
The issue is related to an integer underflow that occurs when the configuration setting "Load printer settings with the document" is enabled. This allows remote attackers to cause a denial of service, resulting in memory corruption and application crash, or possibly execute arbitrary code via crafted PrinterSetup data in an ODF document.
Recommendations
For LibreOffice versions prior to 4.4.5, update to version 4.4.5 or later to resolve the issue.
For Apache OpenOffice versions prior to 4.1.2, update to version 4.1.2 or later to resolve the issue.
As a temporary workaround, consider disabling the "Load printer settings with the document" configuration setting until a patch is available.
Correção
DoS
Integer Underflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Apache Openoffice
Centos
Libreoffice
Openoffice
Red Hat
Suse
Ubuntu