KLA10568 Vulnerability in LibreOffice

An unspecified vulnerability was found in LibreOffice 4.3.х before 4.3.7, LibreOffice 4.4.х before 4.4.2. By exploiting this vulnerability malicious users can cause denial of service (crash) or possibly execute arbitrary code. This vulnerability can be exploited via a crafted HWP document.

Original advisories

LibreOffice Security Advisory

Related products

LibreOffice

CVE list

CVE-2015-1774 high

Solution

Update to the latest versionLibreOffice 4.3.7

LibreOffice 4.4.2

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• LibreOffice before 4.3.7
  LibreOffice 4.4.х before 4.4.2