CVE-2014-9093: Input Validation
Published Nov 26, 2014
·Updated
LibreOffice before 4.3.5 allows remote attackers to cause a denial of service (invalid write operation and crash) and possibly execute arbitrary code via a crafted RTF file.
Affected Software
6 affected components
LibreOffice Libreoffice<=4.3.4
Fedoraproject Fedora=20
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=14.10
Debian Debian Linux=7.0
Event History
Nov 26, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-9093?
CVE-2014-9093 has a medium severity rating due to its potential to cause a denial of service and possibly allow arbitrary code execution.
2
How do I fix CVE-2014-9093?
To fix CVE-2014-9093, update your LibreOffice to version 4.3.5 or later.
3
What software is affected by CVE-2014-9093?
CVE-2014-9093 affects LibreOffice versions before 4.3.5 and certain Linux distributions like Fedora 20 and Ubuntu 12.04 to 14.10.
4
Can CVE-2014-9093 be exploited remotely?
Yes, CVE-2014-9093 can be exploited remotely by attacking users with crafted RTF files.
5
What type of attack is associated with CVE-2014-9093?
CVE-2014-9093 is associated with denial of service attacks and possible arbitrary code execution via crafted RTF files.