Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2014-3575

The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow remote attackers to embed arbitrary data into documents via crafted OLE objects.

PublishedAug 27, 2014, 00:55

Published Bysecalert@redhat.com

Affected Versions

No affected versions found.

References

http://archives.neohapsis.com/archives/bugtraq/2014-08/0115.html
http://blog.documentfoundation.org/2014/08/28/libreoffice-4-3-1-fresh-announced/
http://lists.fedoraproject.org/pipermail/package-announce/2014-September/137657.html
http://rhn.redhat.com/errata/RHSA-2015-0377.html
http://secunia.com/advisories/59600
http://secunia.com/advisories/59877
http://www.openoffice.org/security/cves/CVE-2014-3575.html
http://www.securityfocus.com/bid/69354
http://www.securitytracker.com/id/1030754
https://exchange.xforce.ibmcloud.com/vulnerabilities/95420
https://security.gentoo.org/glsa/201603-05

Weakness Type

CWE-200

CVSS Metrics

Base Score

4.3

Vector String

AV:N/AC:M/Au:N/C:P/I:N/A:N

Base SeverityUnknown

Version

2.0

Attack Vector (AV)