6.8
CVSSv2

CVE-2015-5214

Published: 10/11/2015 Updated: 01/07/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

LibreOffice prior to 4.4.6 and 5.x prior to 5.0.1 and Apache OpenOffice prior to 4.1.2 allows remote malicious users to cause a denial of service (memory corruption and application crash) or execute arbitrary code via an index to a non-existent bookmark in a DOC file.

Vulnerable Product Search on Vulmon Subscribe to Product

canonical ubuntu linux 12.04

canonical ubuntu linux 14.04

canonical ubuntu linux 15.04

debian debian linux 7.0

debian debian linux 8.0

libreoffice libreoffice

apache openoffice

Vendor Advisories

Synopsis Moderate: libreoffice security update Type/Severity Security Advisory: Moderate Topic Updated libreoffice packages that fixes multiple security issues are nowavailable for Red Hat Enterprise Linux 6 and 7Red Hat Product Security has rated this update as having Moderate securityimpact Common Vulne ...
Several security issues were fixed in LibreOffice ...
Multiple vulnerabilities have been discovered in LibreOffice, a full-featured office productivity: CVE-2015-4551 Federico Scrinzi discovered an information leak in the handling of ODF documents Quoting from wwwlibreofficeorg/about-us/security/advisories/cve-2015-4551/: The LinkUpdateMode feature controls whether document ...
It was discovered that LibreOffice did not properly sanity check bookmark indexes By tricking a user into opening a specially crafted document, an attacker could possibly use this flaw to execute arbitrary code with the privileges of the user opening the file ...