CVE-2015-1774: Apache Openoffice

Medium severity, CVSS 6.8. EPSS: 7.6% chance of exploitation in the next 30 days.

The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted HWP document, which triggers an out-of-bounds write.

Affected products

• Apache Openoffice: up to and including 4.1.1
• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 14.10 only
• Debian Debian Linux: version 7.0 only; version 8.0 only
• Fedoraproject Fedora: version 21 only
• Libreoffice Libreoffice: up to and including 4.3.6; version 4.4.0 only; version 4.4.1 only
• Red Hat Enterprise Linux Desktop: version 6.0 only
• Red Hat Enterprise Linux Server: version 6.0 only
• Red Hat Enterprise Linux Workstation: version 6.0 only

Published 2015-04-28. Last modified 2026-06-17.