PT-2015-3385 · Document Foundation+5 · Libreoffice+6

Published 2015-04-25 · Updated 2022-02-07 · CVE-2015-1774

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LibreOffice versions prior to 4.3.7 LibreOffice versions 4.4.x prior to 4.4.2 Apache OpenOffice versions prior to 4.1.2

Description The issue is related to the HWP filter in the affected software, which allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted HWP document. This is due to an out-of-bounds write triggered by the crafted document. Exploitation of the issue may allow an attacker to gain unauthorized access to confidential data, cause a denial of service, or impact data integrity through a specially crafted HWP file.

Recommendations For LibreOffice versions prior to 4.3.7, update to version 4.3.7 or later. For LibreOffice versions 4.4.x prior to 4.4.2, update to version 4.4.2 or later. For Apache OpenOffice versions prior to 4.1.2, update to version 4.1.2 or later.

Fix

DoS

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-787

Related Identifiers

BDU:2020-02956

CESA-2015_1458

CVE-2015-1774

DSA-3236-1

MGASA-2015-0174

RHSA-2015:1458

RHSA-2015_1458

SUSE-SU-2015:1915-1

USN-2578-1

Affected Products

Apache Openoffice

Centos

Libreoffice

Openoffice

Red Hat

Suse

Ubuntu

References · 80

• https://osv.dev/vulnerability/UBUNTU-CVE-2015-1774 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1458.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-1774 · Security Note
• http://debian.org/security/2015/dsa-3236 · Vendor Advisory
• http://ubuntu.com/usn/USN-2578-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2578-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2015-05/msg00015.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-9093 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156582.html · Vendor Advisory
• https://lists.fedoraproject.org/pipermail/package-announce/2015-April/156582.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2015-0174.html · Security Note
• https://osv.dev/vulnerability/USN-2578-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2015:1915-1 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157550.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-1774 · Vendor Advisory