Lucene search

K
mageiaGentoo FoundationMGASA-2014-0446
HistoryNov 14, 2014 - 4:24 a.m.

Updated libreoffice packages fix security vulnerability

2014-11-1404:24:42
Gentoo Foundation
advisories.mageia.org
15

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.002

Percentile

59.5%

A vulnerability in LibreOffice allows an attacker to send a document which when opened will trigger the prompt to “Update Links” but if the user cancels that prompt may still generate and insert into the document an OLE2 preview image of a file on the victims filesystem, Data exposure is possible if the updated document is then distributed to other parties (CVE-2014-3575). LibreOffice has been patched to fix this issue.

OSVersionArchitecturePackageVersionFilename
Mageia3noarchlibreoffice< 4.0.6.2-3libreoffice-4.0.6.2-3.mga3

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.002

Percentile

59.5%