CVE-2015-5212

Name of the Vulnerable Software and Affected Versions LibreOffice versions prior to 4.4.5 Apache OpenOffice versions prior to 4.1.2

Description The issue is related to an integer underflow that occurs when the configuration setting "Load printer settings with the document" is enabled. This allows remote attackers to cause a denial of service, resulting in memory corruption and application crash, or possibly execute arbitrary code via crafted PrinterSetup data in an ODF document.

Recommendations For LibreOffice versions prior to 4.4.5, update to version 4.4.5 or later to resolve the issue. For Apache OpenOffice versions prior to 4.1.2, update to version 4.1.2 or later to resolve the issue. As a temporary workaround, consider disabling the "Load printer settings with the document" configuration setting until a patch is available.