Summary
Rohan Durve and James Kettle discovered LibreOffice Calc sometimes allowed
for command injection when opening spreadsheets. If a user were tricked
into opening a crafted Calc spreadsheet, an attacker could exploit this to
run programs as your login.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libreoffice | 1:4.2.6.3-0ubuntu1 |
Vulnerabilities 1
-
Unscored —CVE-2014-3524 EPSS 14%
Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecifie…
References
-
report
https://ubuntu.com/security/CVE-2014-3524