CVE-2015-5212: Integer Underflow
Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted PrinterSetup data in an ODF document.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5212?
CVE-2015-5212 is classified as a critical vulnerability that can lead to denial of service or potential remote code execution.
How do I fix CVE-2015-5212?
To fix CVE-2015-5212, upgrade LibreOffice to version 4.4.5 or later and Apache OpenOffice to version 4.1.2 or later.
What systems are affected by CVE-2015-5212?
CVE-2015-5212 affects LibreOffice versions before 4.4.5 and Apache OpenOffice versions before 4.1.2, as well as certain versions of Ubuntu and Debian.
Can CVE-2015-5212 lead to data loss?
Yes, CVE-2015-5212 can cause memory corruption which may result in data loss or application crashes.
What should I do if I cannot upgrade to fix CVE-2015-5212?
If you cannot upgrade, disable the configuration setting 'Load printer settings with the document' to mitigate risk from CVE-2015-5212.