Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-3524
HistoryAug 26, 2014 - 12:00 a.m.

CVE-2014-3524

2014-08-2600:00:00
ubuntu.com
ubuntu.com
12

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.006 Low

EPSS

Percentile

78.6%

JSON

Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary
commands and possibly have other unspecified impact via a crafted Calc
spreadsheet.

Bugs

Notes

Author Note
mdeslaur issue was in windows-specific code, USN was released unknowingly
OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchlibreoffice< 1:4.2.6.3-0ubuntu1UNKNOWN
ubuntu14.10noarchlibreoffice< 1:4.3.1~rc2-0ubuntu1UNKNOWN

Related

ibm 1
hackerone 1
openvas 4
cve 1
securityvulns 2
cvelist 1
prion 1
ubuntu 1
nessus 5
nvd 1
gentoo 1
ibm
ibm
Security Bulletin: CVE-2014-3524 CSV Injection in reports
2020-07-24 21:16:35
hackerone
hackerone
Consensys: CSV Injection at https://assets-paris-demo.codefi.network/
2022-10-25 08:59:53
openvas
openvas
Ubuntu: Security Advisory (USN-2331-1)
2014-09-03 00:00:00
Apache OpenOffice Multiple Vulnerabilities (Apr 2015) - Windows
2015-04-09 00:00:00
Apache OpenOffice Multiple Vulnerabilities -01 (May 2015) - Mac OS X
2015-06-01 00:00:00
cve
cve
CVE-2014-3524
2014-08-26 14:55:05
securityvulns
securityvulns
CVE-2014-3524: Apache OpenOffice Calc Command Injection Vulnerability
2014-08-24 00:00:00
Apache OpenOffice security vulnerabilities
2014-08-24 00:00:00
cvelist
cvelist
CVE-2014-3524
2014-08-26 14:00:00
prion
prion
Design/Logic Flaw
2014-08-26 14:55:00
ubuntu
ubuntu
LibreOffice vulnerability
2014-09-02 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : LibreOffice vulnerability (USN-2331-1)
2014-09-03 00:00:00
LibreOffice 4.3.x < 4.3.1 Multiple Vulnerabilities
2014-12-17 00:00:00
Apache OpenOffice < 4.1.1 Multiple Vulnerabilities
2014-08-27 00:00:00
nvd
nvd
CVE-2014-3524
2014-08-26 14:55:05
gentoo
gentoo
LibreOffice, OpenOffice: Multiple vulnerabilities
2016-03-09 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.006 Low

EPSS

Percentile

78.6%

JSON
Related for UB:CVE-2014-3524
ibm1hackerone1openvas4cve1securityvulns2cvelist1prion1ubuntu1nessus5nvd1gentoo1