Lucene search

K
kasperskyKaspersky LabKLA10569
HistoryApr 28, 2015 - 12:00 a.m.

KLA10569 Vulnerability in OpenOffice

2015-04-2800:00:00
Kaspersky Lab
threats.kaspersky.com
18

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.5%

Detect date:

04/28/2015

Severity:

High

Description:

Vulnerability in OpenOffice’s HWP filter was found in Apache OpenOffice 4.1.1 and older. By exploiting this vulnerability malicious users can cause denial of service (crash) or possibly execute arbitrary code. This vulnerability can be exploited via a crafted HWP document.

Affected products:

Apache OpenOffice versions earlier than 4.1.2

Solution:

Update to the latest version
Get OpenOffice

Original advisories:

OpenOffice Bulletin

Impacts:

ACE

Related products:

OpenOffice.org

CVE-IDS:

CVE-2015-17746.8High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.5%