CVE-2014-3524 Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafted Calc spreadsheet.
HighCVSS 9.3
EPSS 14.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafted Calc spreadsheet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache openoffice | < 4.1.1 | 4.1.1 |
| libreoffice | < 4.2.6 | 4.2.6 |
| libreoffice | >= 4.3.0, < 4.3.1 | 4.3.1 |
References
- blog.documentfoundation.org vendor-advisory
- 59600 broken-link third-party-advisory
- 59877 broken-link third-party-advisory
- 60235 broken-link third-party-advisory
- www.openoffice.org vendor-advisory
- 20140821 CVE-2014-3524: Apache OpenOffice Calc Command Injection Vulnerability broken-link mailing-list third-party-advisory vdb-entry
- 69351 broken-link third-party-advisory vdb-entry
- 1030755 broken-link third-party-advisory vdb-entry
- apache-openoffice-cve20143524-command-exec(95421) third-party-advisory vdb-entry
- GLSA-201603-05 third-party-advisory vendor-advisory