Information disclosure in Apache Openoffice

CVE-2014-3575

The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow remote attackers to embed arbitrary data into documents via crafted OLE objects.

Vulnerability class: Information Disclosure

EPSS: 0.099 (95.1th percentile) — read the EPSS interpretation.

Affected products

Apache Openoffice
Libreoffice
Redhat Enterprise_linux_desktop — versions 7.0
Redhat Enterprise_linux_server — versions 7.0
Redhat Enterprise_linux_workstation — versions 7.0
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

secalert@redhat.com (vendor-advisory, x_refsource_FEDORA, Mailing List, Third Party Advisory)
secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)
secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)
secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_SECUNIA, Broken Link, third-party-advisory)
secalert@redhat.com (mailing-list, x_refsource_BUGTRAQ, Broken Link)
secalert@redhat.com (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
secalert@redhat.com (x_refsource_SECUNIA, Broken Link, third-party-advisory)