CVE-2015-1774 Memory corruption in n/a
Remote attackers can execute arbitrary code or cause a crash via a crafted HWP document in LibreOffice and Apache OpenOffice.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2015-1774?
CVE-2015-1774 is a medium-severity memory corruption vulnerability in Apache Openoffice, published on 28 Apr 2015. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted HWP document, which triggers an out-of-bounds write.
Weakness: CWE-787
Which versions are affected by CVE-2015-1774?
It affects 8 products.
Linux distribution packages (40)
autocorr-af Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-bg Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-ca Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-cs Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-da Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-de Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-en Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-es Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-fa Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-fi Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-fr Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-ga Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-hr Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-hu Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-is Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-it Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-ja Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-ko Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-lb Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-lt Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-mn Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-nl Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-pl Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-pt Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-ro Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-ru Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-sk Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-sl Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-sr Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-sv Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-tr Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-vi Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
autocorr-zh Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
libreoffice Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
libreoffice-base Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
libreoffice-bsh Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
libreoffice-calc Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
libreoffice-core Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
libreoffice-debuginfo Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
libreoffice-draw Red Hat:enterprise_linux:6::client | All versions | 1:4.2.8.2-11.el6 |
Products include Apache Openoffice, Canonical Ubuntu Linux, Debian Debian Linux, Fedoraproject Fedora, Libreoffice Libreoffice, Redhat Enterprise Linux Desktop and 2 more.
How do I fix CVE-2015-1774?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2015-1774 being exploited?
There is no known exploitation of CVE-2015-1774 in the wild and no public exploit code.
Other vulnerabilities in Apache Openoffice
Sources
Also known as DEBIAN-CVE-2015-1774, DSA-3236-1, GHSA-6c6p-xqgg-wgfg, MGASA-2015-0174, RHBA-2015:2197, RHSA-2015:1458 and 1 more.