PT-2015-2738 · Document Foundation+5 · Libreoffice+6
Publicado
2015-10-10
·
Atualizado
2024-06-15
·
CVE-2015-5214
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
LibreOffice versions prior to 4.4.6
LibreOffice 5.x versions prior to 5.0.1
Apache OpenOffice versions prior to 4.1.2
Description
The issue is caused by a buffer overflow, allowing a remote attacker to cause a denial of service or execute arbitrary code via an index to a non-existent bookmark in a DOC file. This can lead to memory corruption and application crash.
Recommendations
For LibreOffice versions prior to 4.4.6, update to version 4.4.6 or later.
For LibreOffice 5.x versions prior to 5.0.1, update to version 5.0.1 or later.
For Apache OpenOffice versions prior to 4.1.2, update to version 4.1.2 or later.
As a temporary workaround, consider avoiding the use of DOC files with non-existent bookmarks until a patch is available.
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apache Openoffice
Centos
Libreoffice
Openoffice
Red Hat
Suse
Ubuntu