CVE-2015-4551
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.3%
LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling links, which might allow remote attackers to obtain sensitive information via a crafted document, which embeds data from local files into (1) Calc or (2) Writer.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| libreoffice:libreoffice | libreoffice | le | 4.4.4 |
References
rhn.redhat.com/errata/RHSA-2015-2619.html
www.debian.org/security/2015/dsa-3394
www.libreoffice.org/about-us/security/advisories/cve-2015-4551/
www.openoffice.org/security/cves/CVE-2015-4551.html
www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
www.securityfocus.com/bid/77486
www.securitytracker.com/id/1034085
www.securitytracker.com/id/1034091
www.ubuntu.com/usn/USN-2793-1
security.gentoo.org/glsa/201603-05
security.gentoo.org/glsa/201611-03
Related
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.3%