CVE Database›Document archive›CVE-2015-1774

CVE-2015-1774

libreoffice: HWP file filter vulnerability

Loading…

Severity

Moderate

Red Hat Product Security

4.6

CVSS 2.0

Review impact separately from score.

Published · April 27, 2015

Updated · June 27, 2026

Description

A flaw was found in the way the LibreOffice HWP (Hangul Word Processor) file filter processed certain HWP documents. An attacker able to trick a user into opening a specially crafted HWP document could possibly use this flaw to execute arbitrary code with the privileges of the user opening that document.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 2.0 · 4.6
AV:L/AC:L/Au:N/C:P/I:P/A:P

CWE-1286 · Improper Validation of Syntactic Correctness of Input