PRIOn knowledge basePRION:CVE-2015-4551Format string
6.1 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
59.3%
LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling links, which might allow remote attackers to obtain sensitive information via a crafted document, which embeds data from local files into (1) Calc or (2) Writer.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openoffice | le | 4.1.1 | |
| ubuntu_linux | eq | 12.04 | |
| ubuntu_linux | eq | 14.04 | |
| ubuntu_linux | eq | 15.04 | |
| debian_linux | eq | 8.0 | |
| debian_linux | eq | 7.0 | |
| libreoffice | le | 4.4.4 |
References
rhn.redhat.com/errata/RHSA-2015-2619.html
www.debian.org/security/2015/dsa-3394
www.libreoffice.org/about-us/security/advisories/cve-2015-4551/
www.openoffice.org/security/cves/CVE-2015-4551.html
www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
www.securityfocus.com/bid/77486
www.securitytracker.com/id/1034085
www.securitytracker.com/id/1034091
www.ubuntu.com/usn/USN-2793-1
security.gentoo.org/glsa/201603-05
security.gentoo.org/glsa/201611-03
Related
6.1 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
59.3%