CVE-2014-3575

MOYENNE 4.3CVE-2014-3575 · Published 27/08/2014 · updated 17/06/2026

En bref

CVE-2014-3575 est une vulnérabilité MOYENNE (CVSS 4.3) touchant openoffice (apache), libreoffice (libreoffice).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 11.3%, plus élevée que 96.0% des vulnérabilités.
Correctif : mettre à jour vers 4.1.1, 4.3.1, 4.2.6 ou plus récent.

Package	Affected versions	Patched versions
openoffice apache	`< 4.1.1`	`4.1.1`
libreoffice libreoffice	`≥ 4.3.0, < 4.3.1< 4.2.6`	`4.3.14.2.6`

Description

The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow remote attackers to embed arbitrary data into documents via crafted OLE objects.

References

archives.neohapsis.com/archives/bugtraq/2014-08/0115.html · Broken Link
blog.documentfoundation.org/2014/08/28/libreoffice-4-3-1-fresh-announced · Vendor Advisory
lists.fedoraproject.org/pipermail/package-announce/2014-September/137657.html · Mailing List
rhn.redhat.com/errata/RHSA-2015-0377.html · Third Party Advisory
secunia.com/advisories/59600 · Broken Link
secunia.com/advisories/59877 · Broken Link
openoffice.org/security/cves/CVE-2014-3575.html · Vendor Advisory
securityfocus.com/bid/69354 · Broken Link
securitytracker.com/id/1030754 · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/95420 · Third Party Advisory
security.gentoo.org/glsa/201603-05 · Third Party Advisory

Autres vulnérabilités de openoffice

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free