CVE Vulnerabilities

CVE-2014-3693

Published: Nov 07, 2014 | Modified: Feb 13, 2023
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
5.1 MODERATE
AV:N/AC:H/Au:N/C:P/I:P/A:P
RedHat/V3
Ubuntu
MEDIUM

Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to TCP port 1599.

Affected Software

Name Vendor Start Version End Version
Enterprise_linux_desktop Redhat 7.0 (including) 7.0 (including)
Enterprise_linux_server Redhat 7.0 (including) 7.0 (including)
Enterprise_linux_workstation Redhat 7.0 (including) 7.0 (including)
Red Hat Enterprise Linux 7 RedHat libabw-0:0.0.2-1.el7 *
Red Hat Enterprise Linux 7 RedHat libcmis-0:0.4.1-5.el7 *
Red Hat Enterprise Linux 7 RedHat libetonyek-0:0.0.4-2.el7 *
Red Hat Enterprise Linux 7 RedHat libfreehand-0:0.0.0-3.el7 *
Red Hat Enterprise Linux 7 RedHat liblangtag-0:0.5.4-8.el7 *
Red Hat Enterprise Linux 7 RedHat libmwaw-0:0.2.0-4.el7 *
Red Hat Enterprise Linux 7 RedHat libodfgen-0:0.0.4-1.el7 *
Red Hat Enterprise Linux 7 RedHat libreoffice-1:4.2.6.3-5.el7 *
Red Hat Enterprise Linux 7 RedHat mdds-0:0.10.3-1.el7 *
Libreoffice Ubuntu devel *
Libreoffice Ubuntu trusty *
Libreoffice Ubuntu upstream *
Libreoffice Ubuntu utopic *
Openoffice.org Ubuntu lucid *

References