Lucene search

K
cve[email protected]CVE-2015-5213
HistoryNov 10, 2015 - 5:59 p.m.

CVE-2015-5213

2015-11-1017:59:03
CWE-189
web.nvd.nist.gov
73
cve-2015-5213
integer overflow
libreoffice
apache openoffice
remote attackers
memory corruption
denial of service
buffer overflow
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.2%

Integer overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a long DOC file, which triggers a buffer overflow.

Affected configurations

NVD
Node
canonicalubuntu_linuxMatch12.04lts
OR
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch15.04
OR
debiandebian_linuxMatch7.0
OR
debiandebian_linuxMatch8.0
Node
apacheopenofficeRange4.1.1
Node
libreofficelibreofficeRange4.4.4

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.2%