CVE-2015-1774

Published Apr 28, 2015

Last updated 19 days ago

Overview

Description
The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted HWP document, which triggers an out-of-bounds write.
Source
secalert@redhat.com
NVD status
Modified
Products
ubuntu_linux, debian_linux, openoffice, fedora, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, libreoffice

Risk scores

CVSS 2.0

Type
Primary
Base score
6.8
Impact score
6.4
Exploitability score
8.6
Vector string
AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov
CWE-787

Social media

Hype score
Not currently trending

Configurations

References

Sources include official advisories and independent security research.