CVE-2015-5212

Опубликовано: 10 нояб. 2015

Источник: nvd

CVSS2: 6.8

EPSS Средний

Описание

Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted PrinterSetup data in an ODF document.

Ссылки

http://rhn.redhat.com/errata/RHSA-2015-2619.html
Third Party Advisory
http://www.debian.org/security/2015/dsa-3394
Third Party Advisory
http://www.libreoffice.org/about-us/security/advisories/cve-2015-5212/
Vendor Advisory
http://www.openoffice.org/security/cves/CVE-2015-5212.html
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
Third Party Advisory
http://www.securityfocus.com/bid/77486
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1034085
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1034091
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2793-1
Third Party Advisory
https://security.gentoo.org/glsa/201603-05
Third Party Advisory
https://security.gentoo.org/glsa/201611-03
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-2619.html
Third Party Advisory
http://www.debian.org/security/2015/dsa-3394
Third Party Advisory
http://www.libreoffice.org/about-us/security/advisories/cve-2015-5212/
Vendor Advisory
http://www.openoffice.org/security/cves/CVE-2015-5212.html
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
Third Party Advisory
http://www.securityfocus.com/bid/77486
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1034085
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1034091
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2793-1
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*

Версия до 4.4.4 (включая)

Конфигурация 2

cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*

Версия до 4.1.1 (включая)

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.44545

Средний

6.8 Medium

CVSS2

Дефекты

CWE-191

Связанные уязвимости

CVE-2015-5212

ubuntu

почти 10 лет назад

CVE-2015-5212

redhat

почти 10 лет назад

CVE-2015-5212

debian

почти 10 лет назад

Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice be ...

GHSA-3m69-8mpc-r6h3

github

больше 3 лет назад

BDU:2015-12101

CVSS3: 7.8

fstec

почти 10 лет назад

Уязвимость операционных систем Debian GNU/Linux, Ubuntu, пакетов офисных программ LibreOffice и Apache OpenOffice, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

EPSS

Процентиль: 97%

0.44545

Средний

6.8 Medium

CVSS2

Дефекты

CWE-191