CVE-2015-1774: apache openoffice Out-of-bounds Write

Modified

AliasesMGASA-2015-0174RHBA-2015:2197RHSA-2015:1458+3 more

Published 28-04-2015Last modified 06-08-2024

Vulnerability summary

CVE-2015-1774 is a medium (CVSS 6.8) Out-of-bounds Write vulnerability in apache openoffice. EPSS estimates a 7.59% chance of exploitation in the next 30 days, higher than 94.5% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 6.8, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

6.8/10

010

Medium · v2.0 (NVD)

EPSS score

7.59%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2 · Related 2

SUSE-SU-2015:1915-1 USN-2578-1

Timeline

28-04-2015
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted HWP document, which triggers an out-of-bounds write.

CVSS metrics

1 score · 1 source · 1 version

v2.06.8

EPSS trend

Probability

7.59%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

No change 0.00 pp

From 7.59% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Redhat192 products

enterprise_linux_desktop6.0
enterprise_linux_server6.0
enterprise_linux_workstation6.0
autocorr-af< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-bg< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6

autocorr-ca< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-cs< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-da< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-de< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-en< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-es< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-fa< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-fi< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-fr< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-ga< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-hr< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-hu< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-is< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-it< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-ja< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-ko< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-lb< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-lt< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-mn< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-nl< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-pl< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-pt< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-ro< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-ru< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-sk< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-sl< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-sr< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-sv< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-tr< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-vi< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
autocorr-zh< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
glm< 0:0.9.6.3-1.el7
glm-devel< 0:0.9.6.3-1.el7
glm-doc< 0:0.9.6.3-1.el7
inkscape< 0:0.48.4-15.el7
inkscape-debuginfo< 0:0.48.4-15.el7
inkscape-docs< 0:0.48.4-15.el7
inkscape-view< 0:0.48.4-15.el7
libabw< 0:0.1.1-2.el7
libabw-debuginfo< 0:0.1.1-2.el7
libabw-devel< 0:0.1.1-2.el7
libabw-doc< 0:0.1.1-2.el7
libabw-tools< 0:0.1.1-2.el7
libcdr< 0:0.1.1-1.el7
libcdr-debuginfo< 0:0.1.1-1.el7
libcdr-devel< 0:0.1.1-1.el7
libcdr-doc< 0:0.1.1-1.el7
libcdr-tools< 0:0.1.1-1.el7
libetonyek< 0:0.1.2-4.el7
libetonyek-debuginfo< 0:0.1.2-4.el7
libetonyek-devel< 0:0.1.2-4.el7
libetonyek-doc< 0:0.1.2-4.el7
libetonyek-tools< 0:0.1.2-4.el7
libfreehand< 0:0.1.1-1.el7
libfreehand-debuginfo< 0:0.1.1-1.el7
libfreehand-devel< 0:0.1.1-1.el7
libfreehand-doc< 0:0.1.1-1.el7
libfreehand-tools< 0:0.1.1-1.el7
libmspub< 0:0.1.2-1.el7
libmspub-debuginfo< 0:0.1.2-1.el7
libmspub-devel< 0:0.1.2-1.el7
libmspub-doc< 0:0.1.2-1.el7
libmspub-tools< 0:0.1.2-1.el7
libmwaw< 0:0.3.5-1.el7
libmwaw-debuginfo< 0:0.3.5-1.el7
libmwaw-devel< 0:0.3.5-1.el7
libmwaw-doc< 0:0.3.5-1.el7
libmwaw-tools< 0:0.3.5-1.el7
libodfgen< 0:0.1.4-1.el7
libodfgen-debuginfo< 0:0.1.4-1.el7
libodfgen-devel< 0:0.1.4-1.el7
libodfgen-doc< 0:0.1.4-1.el7
liborcus< 0:0.7.0-6.el7
liborcus-debuginfo< 0:0.7.0-6.el7
liborcus-devel< 0:0.7.0-6.el7
liborcus-tools< 0:0.7.0-6.el7
libreoffice< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-base< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-bsh< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-calc< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-core< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-debuginfo< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-draw< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-emailmerge< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-filters< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-gdb-debug-support< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-glade< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-graphicfilter< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-headless< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-impress< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-af< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-ar< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-as< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-bg< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-bn< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-br< 1:4.3.7.2-5.el7
libreoffice-langpack-ca< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-cs< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-cy< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-da< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-de< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-dz< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-el< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-en< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-es< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-et< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-eu< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-fa< 1:4.3.7.2-5.el7
libreoffice-langpack-fi< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-fr< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-ga< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-gl< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-gu< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-he< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-hi< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-hr< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-hu< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-it< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-ja< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-kk< 1:4.3.7.2-5.el7
libreoffice-langpack-kn< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-ko< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-lt< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-lv< 1:4.3.7.2-5.el7
libreoffice-langpack-mai< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-ml< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-mr< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-ms< 1:4.2.8.2-11.el6
libreoffice-langpack-nb< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-nl< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-nn< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-nr< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-nso< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-or< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-pa< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-pl< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-pt-BR< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-pt-PT< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-ro< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-ru< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-si< 1:4.3.7.2-5.el7
libreoffice-langpack-sk< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-sl< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-sr< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-ss< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-st< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-sv< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-ta< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-te< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-th< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-tn< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-tr< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-ts< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-uk< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-ur< 1:4.2.8.2-11.el6
libreoffice-langpack-ve< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-xh< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-zh-Hans< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-zh-Hant< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-langpack-zu< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-librelogo< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-math< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-nlpsolver< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-officebean< 1:4.3.7.2-5.el7
libreoffice-ogltrans< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-opensymbol-fonts< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-pdfimport< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-postgresql< 1:4.3.7.2-5.el7
libreoffice-pyuno< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-rhino< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-sdk< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-sdk-doc< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-ure< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-wiki-publisher< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-writer< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
libreoffice-xsltfilter< 1:4.3.7.2-5.el7 | < 1:4.2.8.2-11.el6
librevenge< 0:0.0.2-2.el7
librevenge-debuginfo< 0:0.0.2-2.el7
librevenge-devel< 0:0.0.2-2.el7
librevenge-doc< 0:0.0.2-2.el7
libvisio< 0:0.1.1-2.el7
libvisio-debuginfo< 0:0.1.1-2.el7
libvisio-devel< 0:0.1.1-2.el7
libvisio-doc< 0:0.1.1-2.el7
libvisio-tools< 0:0.1.1-2.el7
libwpd< 0:0.10.0-1.el7
libwpd-debuginfo< 0:0.10.0-1.el7

Show all 192

Debian2 products

libreoffice< 1:4.4.2-1 | < 1:3.5.4+dfsg2-0+deb7u4 | < 1:4.3.3-2+deb8u1
debian_linuxEOL7.0 | 8.0

Apache1 product

openoffice≤ 4.1.1

Canonical1 product

ubuntu_linuxEOL12.04 | 14.04 | 14.10

Fedoraproject1 product

fedoraEOL21

Libreoffice1 product

libreofficeEOL≤ 4.3.6 | 4.4.0 | 4.4.1

Mageia1 product

libreoffice< 4.3.7.2-1.mga4

Ubuntu1 product

libreoffice< 1:4.2.8-0ubuntu2

8 vendors · 200 products · Showing 200 of 213

References

52 links

www.securitytracker.com/id/1032205VDB EntryX Refsource SECTRACKThird Party Advisory
www.debian.org/security/2015/dsa-3236Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.openoffice.org/security/cves/CVE-2015-1774.htmlX Refsource CONFIRMVendor AdvisoryARTICLE
lists.fedoraproject.org/pipermail/package-announce/2015-April/156582.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
www.securitytracker.com/id/1032206VDB EntryX Refsource SECTRACKThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2015-May/157550.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
www.securityfocus.com/bid/74338VDB EntryX Refsource BIDThird Party Advisory
www.libreoffice.org/about-us/security/advisories/cve-2015-1774/X Refsource CONFIRMVendor Advisory
rhn.redhat.com/errata/RHSA-2015-1458.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
lists.opensuse.org/opensuse-updates/2015-05/msg00015.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory

Show all 52 references

www.verisign.com/en_US/…Third Party AdvisoryX Refsource IDEFENSE
www.ubuntu.com/usn/USN-2578-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
security.gentoo.org/glsa/201603-05Vendor AdvisoryX Refsource GENTOOThird Party Advisory
advisories.mageia.org/MGASA-2015-0174.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=15778REPORT
www.libreoffice.org/about-us/security/advisories/cve-2015-1774AdvisoryARTICLE
lists.fedoraproject.org/pipermail/package-announce/2015-April/156582.htmlWEB
access.redhat.com/errata/RHBA-2015:2197Advisory
wiki.documentfoundation.org/ReleaseNotes/4.3ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=833452REPORT
bugzilla.redhat.com/show_bug.cgi?id=1161238REPORT
bugzilla.redhat.com/show_bug.cgi?id=1202116REPORT
bugzilla.redhat.com/show_bug.cgi?id=1204244REPORT
bugzilla.redhat.com/show_bug.cgi?id=1205091REPORT
bugzilla.redhat.com/show_bug.cgi?id=1207749REPORT
bugzilla.redhat.com/show_bug.cgi?id=1207750REPORT
bugzilla.redhat.com/show_bug.cgi?id=1207752REPORT
bugzilla.redhat.com/show_bug.cgi?id=1207753REPORT
bugzilla.redhat.com/show_bug.cgi?id=1207755REPORT
bugzilla.redhat.com/show_bug.cgi?id=1207757REPORT
bugzilla.redhat.com/show_bug.cgi?id=1207758REPORT
bugzilla.redhat.com/show_bug.cgi?id=1207761REPORT
bugzilla.redhat.com/show_bug.cgi?id=1207762REPORT
bugzilla.redhat.com/show_bug.cgi?id=1207766REPORT
bugzilla.redhat.com/show_bug.cgi?id=1207767REPORT
bugzilla.redhat.com/show_bug.cgi?id=1207772REPORT
bugzilla.redhat.com/show_bug.cgi?id=1212340REPORT
security.access.redhat.com/data/csaf/v2/advisories/2015/rhba-2015_2197.jsonAdvisory
access.redhat.com/security/cve/CVE-2015-1774REPORT
bugzilla.redhat.com/show_bug.cgi?id=1216042REPORT
www.cve.org/CVERecord?id=CVE-2015-1774AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2015-1774Advisory
access.redhat.com/errata/RHSA-2015:1458Advisory
access.redhat.com/security/updates/classification/ARTICLE
wiki.documentfoundation.org/ReleaseNotes/4.2ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1015083REPORT
bugzilla.redhat.com/show_bug.cgi?id=1150048REPORT
bugzilla.redhat.com/show_bug.cgi?id=1209852REPORT
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1458.jsonAdvisory
ubuntu.com/security/CVE-2015-1774REPORT
ubuntu.com/security/notices/USN-2578-1Advisory
security-tracker.debian.org/tracker/CVE-2015-1774Advisory