Apache OpenOffice HWP Filter Memory Corruption Vulnerability

Bugtraq ID:	74338
Class:	Input Validation Error
CVE:	CVE-2015-1774
Remote:	Yes
Local:	No
Published:	Apr 26 2015 12:00AM
Updated:	Jul 05 2016 09:41PM
Credit:	An anonymous working with VeriSign iDefense Labs.
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 LibreOffice LibreOffice 3.5.3 LibreOffice LibreOffice 3.4.0 LibreOffice LibreOffice 3.3.3 LibreOffice LibreOffice 3.3.2 LibreOffice LibreOffice 3.3.1 Gentoo Linux
Not Vulnerable:

Apache OpenOffice HWP Filter Memory Corruption Vulnerability

Apache OpenOffice is prone to a remote memory-corruption vulnerability.

An attacker could exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts will likely result in denial-of-service conditions.

Apache OpenOffice versions 4.1.1 and prior are vulnerable.

Apache OpenOffice HWP Filter Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apache OpenOffice HWP Filter Memory Corruption Vulnerability

References:

• CVE-2015-1774: OpenOffice HWP Filter Remote Execution and Do (Apache)
  
• OpenOffice Homepage (OpenOffice)