CVE-2015-4551
Published · Updated
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 14%
exploitation probability
14%top 4% of all CVEs
observed exploitation
nono source reports it
LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling links, which might allow remote attackers to obtain sensitive information via a crafted document, which embeds data from local files into (1) Calc or (2) Writer.
Affected products
n/a · n/aReferences
http://rhn.redhat.com/errata/RHSA-2015-2619.htmlhttps://security.gentoo.org/glsa/201603-05https://security.gentoo.org/glsa/201611-03http://www.debian.org/security/2015/dsa-3394http://www.libreoffice.org/about-us/security/advisories/cve-2015-4551/http://www.openoffice.org/security/cves/CVE-2015-4551.htmlhttp://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlhttp://www.securityfocus.com/bid/77486http://www.securitytracker.com/id/1034085http://www.securitytracker.com/id/1034091http://www.ubuntu.com/usn/USN-2793-1