CVE-2015-4551: Infoleak
LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling links, which might allow remote attackers to obtain sensitive information via a crafted document, which embeds data from local files into (1) Calc or (2) Writer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4551?
CVE-2015-4551 is classified as a medium severity vulnerability that allows potential information disclosure.
How do I fix CVE-2015-4551?
To fix CVE-2015-4551, users should upgrade LibreOffice to version 4.4.5 or higher and Apache OpenOffice to version 4.1.2 or higher.
Who is affected by CVE-2015-4551?
CVE-2015-4551 affects users of LibreOffice versions prior to 4.4.5 and Apache OpenOffice versions prior to 4.1.2 on various operating systems including Ubuntu and Debian.
What type of vulnerability is CVE-2015-4551?
CVE-2015-4551 is a stored configuration vulnerability that can be exploited to obtain sensitive information from crafted documents.
Can CVE-2015-4551 be exploited remotely?
Yes, CVE-2015-4551 can be exploited remotely through crafted OpenDocument Format files that embed sensitive data.