CVEvulnerability
CVE-2015-4551
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-11-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling links, which might allow remote attackers to obtain sensitive information via a crafted document, which embeds data from local files into (1) Calc or (2) Writer.
Affected configurations
• libreoffice libreoffice (<= 4.4.4)
• canonical ubuntu linux 12.04
• canonical ubuntu linux 14.04
• canonical ubuntu linux 15.04
• debian debian linux 7.0
• debian debian linux 8.0
• apache openoffice (<= 4.1.1)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://rhn.redhat.com/errata/RHSA-2015-2619.html Third Party Advisory
- http://www.debian.org/security/2015/dsa-3394 Third Party Advisory
- http://www.libreoffice.org/about-us/security/advisories/cve-2015-4551/ Vendor Advisory
- http://www.openoffice.org/security/cves/CVE-2015-4551.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html Third Party Advisory
- http://www.securityfocus.com/bid/77486 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034085 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034091 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2793-1 Third Party Advisory
- https://security.gentoo.org/glsa/201603-05 Third Party Advisory
- https://security.gentoo.org/glsa/201611-03 Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2619.html Third Party Advisory
- http://www.debian.org/security/2015/dsa-3394 Third Party Advisory
- http://www.libreoffice.org/about-us/security/advisories/cve-2015-4551/ Vendor Advisory
- http://www.openoffice.org/security/cves/CVE-2015-4551.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html Third Party Advisory
- http://www.securityfocus.com/bid/77486 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034085 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034091 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2793-1 Third Party Advisory
- https://security.gentoo.org/glsa/201603-05 Third Party Advisory
- https://security.gentoo.org/glsa/201611-03 Third Party Advisory