CVE-2015-5212

Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted PrinterSetup data in an ODF document.

• CWE-191

• http://rhn.redhat.com/errata/RHSA-2015-2619.htmlThird Party Advisory
• http://www.debian.org/security/2015/dsa-3394Third Party Advisory
• http://www.libreoffice.org/about-us/security/advisories/cve-2015-5212/Vendor Advisory
• http://www.openoffice.org/security/cves/CVE-2015-5212.htmlVendor Advisory
• http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlThird Party Advisory
• http://www.securityfocus.com/bid/77486Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1034085Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1034091Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2793-1Third Party Advisory
• https://security.gentoo.org/glsa/201603-05Third Party Advisory
• https://security.gentoo.org/glsa/201611-03Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-2619.htmlThird Party Advisory
• http://www.debian.org/security/2015/dsa-3394Third Party Advisory
• http://www.libreoffice.org/about-us/security/advisories/cve-2015-5212/Vendor Advisory
• http://www.openoffice.org/security/cves/CVE-2015-5212.htmlVendor Advisory
• http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlThird Party Advisory
• http://www.securityfocus.com/bid/77486Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1034085Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1034091Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2793-1Third Party Advisory
• https://security.gentoo.org/glsa/201603-05Third Party Advisory
• https://security.gentoo.org/glsa/201611-03Third Party Advisory

Published

Nov 10, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-5206Unspecified vulnerability in the HTTP/2 experimental feature…
• CVE-2015-5207Apache Cordova iOS before 4.0.0 might allow attackers to byp…
• CVE-2015-5208Apache Cordova iOS before 4.0.0 allows remote attackers to e…
• CVE-2015-5209Apache Struts 2.x before 2.3.24.1 allows remote attackers to…
• CVE-2015-5210Open redirect vulnerability in Apache Ambari before 2.1.2 al…
• CVE-2015-5211Under some situations, the Spring Framework 4.2.0 to 4.2.1, …9.6
• CVE-2015-5213Integer overflow in LibreOffice before 4.4.5 and Apache Open…
• CVE-2015-5214LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache Ope…
• CVE-2015-5215The default configuration of the Jinja templating engine use…6.1
• CVE-2015-5216The Identity Provider (IdP) server in Ipsilon 0.1.0 before 1…6.1
• CVE-2015-5217providers/saml2/admin.py in the Identity Provider (IdP) serv…
• CVE-2015-5218Buffer overflow in text-utils/colcrt.c in colcrt in util-lin…