CVE-2015-5212

Опубликовано: 10 нояб. 2015

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted PrinterSetup data in an ODF document.

Ссылки

http://rhn.redhat.com/errata/RHSA-2015-2619.html
Third Party Advisory
http://www.debian.org/security/2015/dsa-3394
Third Party Advisory
http://www.libreoffice.org/about-us/security/advisories/cve-2015-5212/
Vendor Advisory
http://www.openoffice.org/security/cves/CVE-2015-5212.html
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
Third Party Advisory
http://www.securityfocus.com/bid/77486
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1034085
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1034091
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2793-1
Third Party Advisory
https://security.gentoo.org/glsa/201603-05
Third Party Advisory
https://security.gentoo.org/glsa/201611-03
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-2619.html
Third Party Advisory
http://www.debian.org/security/2015/dsa-3394
Third Party Advisory
http://www.libreoffice.org/about-us/security/advisories/cve-2015-5212/
Vendor Advisory
http://www.openoffice.org/security/cves/CVE-2015-5212.html
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
Third Party Advisory
http://www.securityfocus.com/bid/77486
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1034085
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1034091
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2793-1
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*

Версия до 4.4.4 (включая)

Конфигурация 2

cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*

Версия до 4.1.1 (включая)

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.08722

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-191

Связанные уязвимости

CVE-2015-5212

ubuntu

больше 10 лет назад

CVE-2015-5212

redhat

больше 10 лет назад

CVE-2015-5212

debian

больше 10 лет назад

Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice be ...

GHSA-3m69-8mpc-r6h3

github

около 4 лет назад

BDU:2015-12101

CVSS3: 7.8

fstec

больше 10 лет назад

Уязвимость операционных систем Debian GNU/Linux, Ubuntu, пакетов офисных программ LibreOffice и Apache OpenOffice, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

EPSS

Процентиль: 95%

0.08722

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-191