Unscored severity · published Aug 27, 2014
CVE-2014-3575
The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow remote attackers to embed arbitrary data into documents via crafted OLE objects
–
CVSS
11.3%
EPSS
No
On KEV
Description
The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow remote attackers to embed arbitrary data into documents via crafted OLE objects.
Exploitation
Is it being used?
Exploit prediction (EPSS)11.3% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EL
Enterprise Linux Desktop · Redhat
7.0 · source: NVD
EL
Enterprise Linux Server · Redhat
7.0 · source: NVD
EL
Enterprise Linux Workstation · Redhat
7.0 · source: NVD
LI
Libreoffice · Libreoffice
before 4.2.6; 4.3.0 before 4.3.1 · source: NVD
OP
Openoffice · Apache
before 4.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3575
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3575
Broken Link
http://archives.neohapsis.com/archives/bugtraq/2014-08/0115.html
Vendor Advisory
http://blog.documentfoundation.org/2014/08/28/libreoffice-4-3-1-fresh-announced/
Mailing List
http://lists.fedoraproject.org/pipermail/package-announce/2014-September/137657.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0377.html
Broken Link
http://secunia.com/advisories/59600
Broken Link
http://secunia.com/advisories/59877
More from Openoffice
8.8
CVE-2023-47804
Apache OpenOffice documents can contain links that call internal macros with arbitrary arguments
8.8
CVE-2022-37401
Apache OpenOffice supports the storage of passwords for web connections in the user's configuration database
8.8
CVE-2022-37400
Apache OpenOffice supports the storage of passwords for web connections in the user's configuration database
8.8
CVE-2021-30245
The project received a report that all versions of Apache OpenOffice through 4.1.8 can open non-http(s) hyperlinks
8.1
CVE-2025-64403
Apache OpenOffice Calc spreadsheet can contain links to other files, in the form of "external data sources"