CVE-2015-1774

The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted HWP document, which triggers an out-of-bounds write.

• CWE-787

• http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156582.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157550.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2015-05/msg00015.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1458.htmlThird Party Advisory
• http://www.debian.org/security/2015/dsa-3236Third Party Advisory
• http://www.openoffice.org/security/cves/CVE-2015-1774.htmlVendor Advisory
• http://www.securityfocus.com/bid/74338Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032205Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032206Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2578-1Third Party Advisory
• https://security.gentoo.org/glsa/201603-05Third Party Advisory
• https://www.libreoffice.org/about-us/security/advisories/cve-2015-1774/Vendor Advisory
• https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1094Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156582.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157550.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2015-05/msg00015.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1458.htmlThird Party Advisory
• http://www.debian.org/security/2015/dsa-3236Third Party Advisory
• http://www.openoffice.org/security/cves/CVE-2015-1774.htmlVendor Advisory
• http://www.securityfocus.com/bid/74338Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032205Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032206Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2578-1Third Party Advisory
• https://security.gentoo.org/glsa/201603-05Third Party Advisory
• https://www.libreoffice.org/about-us/security/advisories/cve-2015-1774/Vendor Advisory
• https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1094Third Party Advisory

Published

Apr 28, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-1768win32k.sys in the kernel-mode drivers in Microsoft Windows S…
• CVE-2015-1769Mount Manager in Microsoft Windows Vista SP2, Windows Server…6.6
• CVE-2015-1770Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote atta…8.8
• CVE-2015-1771Cross-site request forgery (CSRF) vulnerability in the web a…
• CVE-2015-1772The LDAP implementation in HiveServer2 in Apache Hive before…
• CVE-2015-1773Cross-site scripting (XSS) vulnerability in asdoc/templates/…
• CVE-2015-1775Server-side request forgery (SSRF) vulnerability in the prox…
• CVE-2015-1776Apache Hadoop 2.6.x encrypts intermediate data generated by …
• CVE-2015-1777rhnreg_ks in Red Hat Network Client Tools (aka rhn-client-to…
• CVE-2015-1778The custom authentication realm used by karaf-tomcat's "open…
• CVE-2015-1779The VNC websocket frame decoder in QEMU allows remote attack…8.6
• CVE-2015-1780oVirt users with MANIPULATE_STORAGE_DOMAIN permissions can a…6.5