Skip to main content

LibreOffice HWP Filter Memory Corruption Vulnerability

Last Update Date: 5 May 2015 Release Date: 28 Apr 2015 3739 Views

RISK: Medium Risk

TYPE: Clients - Productivity Products

TYPE: Productivity Products

A vulnerability has been identified in LibreOffice, which can be exploited by malicious people to potentially compromise a user's system.

The vulnerability is caused due to an error related to the HWP filter, which can be exploited to cause a memory corruption via a specially crafted HWP file.

Successful exploitation may allow execution of arbitrary code.


Impact

  • Denial of Service
  • Remote Code Execution

System / Technologies affected

  • versions prior to 4.3.7 and prior to 4.4.2.

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

  • Update to version 4.3.7 or 4.4.2.

Vulnerability Identifier


Source


Related Link