PT-2015-2737 · Document Foundation+5 · Libreoffice+6
Publicado
2015-10-10
·
Atualizado
2024-06-15
·
CVE-2015-5213
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
LibreOffice versions prior to 4.4.5
Apache OpenOffice versions prior to 4.1.2
Description
The issue is related to an integer overflow that can be exploited by a remote attacker. This can be achieved by using a long DOC file, which triggers a buffer overflow, potentially allowing the attacker to cause a denial of service, including memory corruption and application crash, or possibly execute arbitrary code.
Recommendations
For LibreOffice versions prior to 4.4.5, update to version 4.4.5 or later to resolve the issue.
For Apache OpenOffice versions prior to 4.1.2, update to version 4.1.2 or later to resolve the issue.
As a temporary workaround, consider avoiding the use of long DOC files in the affected software until a patch is applied.
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apache Openoffice
Centos
Libreoffice
Openoffice
Red Hat
Suse
Ubuntu