Back to feed
EUVD-2015-4571 · Published Nov 10, 2015
LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling links, which might allow remote attackers to obtain sensitive information via a crafted document, which embeds data from local files into (1) Calc or (2) Writer.
Technologies
Canonical Ubuntu LinuxApache OpenofficeDebian Debian LinuxLibreoffice Libreoffice
Weaknesses
CWE-200
CVSS scores
- v2.04.3
AV:N/AC:M/Au:N/C:P/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- http://rhn.redhat.com/errata/RHSA-2015-2619.html
- http://www.debian.org/security/2015/dsa-3394
- http://www.libreoffice.org/about-us/security/advisories/cve-2015-4551/
- http://www.openoffice.org/security/cves/CVE-2015-4551.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77486
Potentially impacted assets
See if this affects your attack surface
