VDB
CVE-2015-4551
CVE-2015-4551
PUBLISHED
LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling links, which might allow remote attackers to obtain sensitive information via a crafted document, which embeds data from local files into (1) Calc or (2) Writer.
EPSS 13.83% · 96.4th percentile
Risk Scores
EPSS Score
13.83%
96.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:14.04:LTS | libreoffice | 0, 1:4.1.2~rc3-0ubuntu2, 1:4.1.3-0ubuntu2 |
Timeline
- Oct 10, 2015 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Dec 17, 2024 EPSS Score
- Mar 29, 2025 EPSS Score
- Mar 30, 2025 EPSS Score
- May 1, 2025 EPSS Score
- May 4, 2025 EPSS Score
- Jun 1, 2025 EPSS Score
- Jul 1, 2025 EPSS Score
- Jul 4, 2025 EPSS Score
- Jul 13, 2025 EPSS Score
References
- https://ubuntu.com/security/CVE-2015-4551 third-party-advisory
- https://www.libreoffice.org/about-us/security/advisories/cve-2015-4551/ third-party-advisory
- https://ubuntu.com/security/notices/USN-2793-1 vendor-advisory
- https://www.cve.org/CVERecord?id=CVE-2015-4551 third-party-advisory