CVE-2015-5212
Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service (memory corruption and…
Does this matter?
Lower severity and a low EPSS score (8.72%). Track it; it rarely justifies an emergency change on its own.
Description
Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted PrinterSetup data in an ODF document.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 8.72% probability · 95th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-191
- Affected
- libreoffice/libreoffice · apache/openoffice · canonical/ubuntu linux · debian/debian linux
- Source
- secalert@redhat.com
References
- http://rhn.redhat.com/errata/RHSA-2015-2619.htmlThird Party Advisory
- http://www.debian.org/security/2015/dsa-3394Third Party Advisory
- http://www.libreoffice.org/about-us/security/advisories/cve-2015-5212/Vendor Advisory
- http://www.openoffice.org/security/cves/CVE-2015-5212.htmlVendor Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlThird Party Advisory
- http://www.securityfocus.com/bid/77486Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034085Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034091Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2793-1Third Party Advisory
- https://security.gentoo.org/glsa/201603-05Third Party Advisory
- https://security.gentoo.org/glsa/201611-03Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2619.htmlThird Party Advisory
- http://www.debian.org/security/2015/dsa-3394Third Party Advisory
- http://www.libreoffice.org/about-us/security/advisories/cve-2015-5212/Vendor Advisory
- http://www.openoffice.org/security/cves/CVE-2015-5212.htmlVendor Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlThird Party Advisory
- http://www.securityfocus.com/bid/77486Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034085Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034091Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2793-1Third Party Advisory
- https://security.gentoo.org/glsa/201603-05Third Party Advisory
- https://security.gentoo.org/glsa/201611-03Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.