CVE-2015-4551

MEDIUM 4.3CVE-2015-4551 · Published 10/11/2015 · updated 17/06/2026

Package	Affected versions	Patched versions
openoffice apache	`≤ 4.1.1`	No fix yet
libreoffice libreoffice	`≤ 4.4.4`	No fix yet

Description

LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling links, which might allow remote attackers to obtain sensitive information via a crafted document, which embeds data from local files into (1) Calc or (2) Writer.

References

rhn.redhat.com/errata/RHSA-2015-2619.html · Third Party Advisory
debian.org/security/2015/dsa-3394 · Third Party Advisory
libreoffice.org/about-us/security/advisories/cve-2015-4551 · Vendor Advisory
openoffice.org/security/cves/CVE-2015-4551.html · Vendor Advisory
oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html · Third Party Advisory
securityfocus.com/bid/77486 · Broken Link
securitytracker.com/id/1034085 · Third Party Advisory
securitytracker.com/id/1034091 · Third Party Advisory
ubuntu.com/usn/USN-2793-1 · Third Party Advisory
security.gentoo.org/glsa/201603-05 · Third Party Advisory
security.gentoo.org/glsa/201611-03 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free