CVE-2015-5212

LibreOffice <4.4.5 & Apache OpenOffice <4.1.2 - Memory Corruption

Title source: llm

Description

Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted PrinterSetup data in an ODF document.

References (11)

Core 11

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1034085

Vendor Advisory x_refsource_confirm

http://www.libreoffice.org/about-us/security/advisories/cve-2015-5212/

Third Party Advisory vendor-advisory x_refsource_gentoo

https://security.gentoo.org/glsa/201611-03

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1034091

Third Party Advisory x_refsource_confirm

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Third Party Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2015-2619.html

Third Party Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-2793-1

Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/77486

Vendor Advisory x_refsource_confirm

http://www.openoffice.org/security/cves/CVE-2015-5212.html

Third Party Advisory vendor-advisory x_refsource_gentoo

https://security.gentoo.org/glsa/201603-05

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2015/dsa-3394

Scores

EPSS 0.4303

EPSS Percentile 97.5%

Details

CWE

CWE-191

Status published

Products (7)

apache/openoffice < 4.1.1

canonical/ubuntu_linux 12.04

canonical/ubuntu_linux 14.04

canonical/ubuntu_linux 15.04

debian/debian_linux 7.0

debian/debian_linux 8.0

libreoffice/libreoffice < 4.4.4

Published Nov 10, 2015

Tracked Since Feb 18, 2026