Unscored severity · published Nov 10, 2015
CVE-2015-5212
Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows…
–
CVSS
8.7%
EPSS
No
On KEV
Description
Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted PrinterSetup data in an ODF document.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.7% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
7.0; 8.0 · source: NVD
LI
Libreoffice · Libreoffice
through 4.4.4 · source: NVD
OP
Openoffice · Apache
through 4.1.1 · source: NVD
UL
Ubuntu Linux · Canonical
12.04; 14.04; 15.04 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-5212
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-5212
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-2619.html
Third Party Advisory
http://www.debian.org/security/2015/dsa-3394
Vendor Advisory
http://www.libreoffice.org/about-us/security/advisories/cve-2015-5212/
Vendor Advisory
http://www.openoffice.org/security/cves/CVE-2015-5212.html
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
Broken Link
http://www.securityfocus.com/bid/77486
More from Openoffice
8.8
CVE-2023-47804
Apache OpenOffice documents can contain links that call internal macros with arbitrary arguments
8.8
CVE-2022-37401
Apache OpenOffice supports the storage of passwords for web connections in the user's configuration database
8.8
CVE-2022-37400
Apache OpenOffice supports the storage of passwords for web connections in the user's configuration database
8.8
CVE-2021-30245
The project received a report that all versions of Apache OpenOffice through 4.1.8 can open non-http(s) hyperlinks
8.1
CVE-2025-64403
Apache OpenOffice Calc spreadsheet can contain links to other files, in the form of "external data sources"