6.8
CVSSv2

CVE-2015-5213

Published: 10/11/2015 Updated: 01/07/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Integer overflow in LibreOffice prior to 4.4.5 and Apache OpenOffice prior to 4.1.2 allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a long DOC file, which triggers a buffer overflow.

Vulnerable Product Search on Vulmon Subscribe to Product

debian debian linux 7.0

canonical ubuntu linux 14.04

canonical ubuntu linux 15.04

debian debian linux 8.0

canonical ubuntu linux 12.04

apache openoffice

libreoffice libreoffice

Vendor Advisories

Synopsis Moderate: libreoffice security update Type/Severity Security Advisory: Moderate Topic Updated libreoffice packages that fixes multiple security issues are nowavailable for Red Hat Enterprise Linux 6 and 7Red Hat Product Security has rated this update as having Moderate securityimpact Common Vulne ...
Several security issues were fixed in LibreOffice ...
Multiple vulnerabilities have been discovered in LibreOffice, a full-featured office productivity: CVE-2015-4551 Federico Scrinzi discovered an information leak in the handling of ODF documents Quoting from wwwlibreofficeorg/about-us/security/advisories/cve-2015-4551/: The LinkUpdateMode feature controls whether document ...
An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way LibreOffice processed certain Microsoft Word doc files By tricking a user into opening a specially crafted Microsoft Word doc document, an attacker could possibly use this flaw to execute arbitrary code with the privileges of the user opening the file ...