CVE-2014-3575: Infoleak
The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow remote attackers to embed arbitrary data into documents via crafted OLE objects.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3575?
CVE-2014-3575 has a moderate severity level due to its potential to allow remote attackers to embed malicious OLE objects into documents.
How do I fix CVE-2014-3575?
To fix CVE-2014-3575, upgrade Apache OpenOffice to version 4.1.1 or higher, and ensure LibreOffice is updated beyond version 4.2.6.
Which versions are affected by CVE-2014-3575?
CVE-2014-3575 affects Apache OpenOffice versions before 4.1.1 and LibreOffice up to 4.2.6, as well as specific Red Hat Enterprise Linux versions.
Can CVE-2014-3575 be exploited remotely?
Yes, CVE-2014-3575 can potentially be exploited remotely through crafted OLE objects contained in documents.
What is the impact of CVE-2014-3575 on systems?
The impact of CVE-2014-3575 includes the risk of remote code execution if a user opens a malicious document containing the crafted OLE objects.