Detections
Analytics

Apache OpenOffice < 4.1.1 Multiple Vulnerabilities

critical Nessus Plugin ID 77408

Language:

Synopsis

The remote Windows host has an application installed that is affected by multiple vulnerabilities.

Description

The version of Apache OpenOffice installed on the remote host is a version prior to 4.1.1. It is, therefore, affected by the following vulnerabilities :

 - An unspecified flaw allows remote attackers to execute arbitrary commands via a specially crafted Calc spreadsheet. (CVE-2014-3524)

 - A flaw in the OLE preview generation allows a remote attacker to embed arbitrary data into documents via specially crafted OLE objects. (CVE-2014-3575)

Solution

Upgrade to Apache OpenOffice version 4.1.1 or later.

See Also

https://www.openoffice.org/security/cves/CVE-2014-3524.html

https://www.openoffice.org/security/cves/CVE-2014-3575.html

Plugin Details

Severity: Critical

ID: 77408

File Name: openoffice_411.nasl

Version: 1.8

Type: Local

Agent: windows

Family: Windows

Published: 8/27/2014

Updated: 9/29/2026

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.9

Percentile: 97.35

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2014-3524

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS Score Source: CVE-2014-3524

Vulnerability Information

CPE: cpe:/a:apache:openoffice

Required KB Items: SMB/OpenOffice/Build

Exploit Ease: No known exploits are available

Patch Publication Date: 8/21/2014

Vulnerability Publication Date: 8/21/2014

Reference Information

CVE: CVE-2014-3524, CVE-2014-3575

BID: 69351, 69354