CVE-2014-3575

Description

The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow remote attackers to embed arbitrary data into documents via crafted OLE objects.

References

https://security.gentoo.org/glsa/201603-05

https://exchange.xforce.ibmcloud.com/vulnerabilities/95420

http://www.openoffice.org/security/cves/CVE-2014-3575.html

http://rhn.redhat.com/errata/RHSA-2015-0377.html

http://lists.fedoraproject.org/pipermail/package-announce/2014-September/137657.html

http://blog.documentfoundation.org/2014/08/28/libreoffice-4-3-1-fresh-announced/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3