CVE-2015-1774

Published: Apr 28, 2015Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted HWP document, which triggers an out-of-bounds write.

Affected (13)

Products: Canonical: Ubuntu Linux · Debian: Debian Linux · Apache: Openoffice · +3 more

Show all products

Canonical: Ubuntu Linux · Debian: Debian Linux · Apache: Openoffice · Fedoraproject: Fedora · Redhat: Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Workstation · Libreoffice: Libreoffice

1 product

1 product

1 product

1 product

3 products

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Workstation

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 14.10

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Debian Debian Linux	Version 8.0

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Apache Openoffice	Up to 4.1.1

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 21

Configuration E

3 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Workstation	Version 6.0

Configuration F

3 vulnerable

Vulnerable Software	Affected Versions
Libreoffice Libreoffice	Up to 4.3.6
Libreoffice Libreoffice	Version 4.4.0
Libreoffice Libreoffice	Version 4.4.1

Related CWEs

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (26)

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156582.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157550.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-05/msg00015.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1458.html

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2015/dsa-3236

Source: secalert@redhat.com

Third Party Advisory

http://www.openoffice.org/security/cves/CVE-2015-1774.html

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/bid/74338

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1032205

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1032206

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2578-1

Source: secalert@redhat.com

Third Party Advisory

https://security.gentoo.org/glsa/201603-05

Source: secalert@redhat.com

Third Party Advisory

https://www.libreoffice.org/about-us/security/advisories/cve-2015-1774/

Source: secalert@redhat.com

Vendor Advisory

https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1094

Source: secalert@redhat.com

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156582.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157550.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-05/msg00015.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1458.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.debian.org/security/2015/dsa-3236

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.openoffice.org/security/cves/CVE-2015-1774.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/74338

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1032205

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1032206

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2578-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.gentoo.org/glsa/201603-05

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.libreoffice.org/about-us/security/advisories/cve-2015-1774/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1094

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.