Published: 28/04/2015 Updated: 07/02/2022

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

The HWP filter in LibreOffice prior to 4.3.7 and 4.4.x prior to 4.4.2 and Apache OpenOffice prior to 4.1.2 allows remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted HWP document, which triggers an out-of-bounds write.

Vulnerable Product	Search on Vulmon	Subscribe to Product
canonical ubuntu linux 12.04
canonical ubuntu linux 14.04
canonical ubuntu linux 14.10
debian debian linux 8.0
debian debian linux 7.0
apache openoffice
fedoraproject fedora 21
redhat enterprise linux workstation 6.0
redhat enterprise linux server 6.0
redhat enterprise linux desktop 6.0
libreoffice libreoffice
libreoffice libreoffice 4.4.0
libreoffice libreoffice 4.4.1

LibreOffice could be made to crash or run programs as your login if it opened a specially crafted file ...

A flaw was found in the way the LibreOffice HWP (Hangul Word Processor) file filter processed certain HWP documents An attacker able to trick a user into opening a specially crafted HWP document could possibly use this flaw to execute arbitrary code with the privileges of the user opening that document ...

CWE-787 http://www.openoffice.org/security/cves/CVE-2015-1774.html http://www.debian.org/security/2015/dsa-3236 https://www.libreoffice.org/about-us/security/advisories/cve-2015-1774/http://www.ubuntu.com/usn/USN-2578-1 http://www.securitytracker.com/id/1032206 http://www.securitytracker.com/id/1032205 http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156582.html http://rhn.redhat.com/errata/RHSA-2015-1458.html http://www.securityfocus.com/bid/74338 https://security.gentoo.org/glsa/201603-05 https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1094 http://lists.opensuse.org/opensuse-updates/2015-05/msg00015.html http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157550.html https://usn.ubuntu.com/2578-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2015-1774

CVE-2015-1774

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect