Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to TCP port 1599.
References
Link | Resource |
---|---|
https://www.libreoffice.org/about-us/security/advisories/CVE-2014-3693/ | Vendor Advisory |
http://secunia.com/advisories/62132 | |
http://secunia.com/advisories/62111 | |
http://www.ubuntu.com/usn/USN-2398-1 | Patch Third Party Advisory |
http://lists.opensuse.org/opensuse-updates/2014-11/msg00049.html | Third Party Advisory |
http://secunia.com/advisories/62396 | |
http://rhn.redhat.com/errata/RHSA-2015-0377.html | Third Party Advisory |
http://www.securityfocus.com/bid/71351 | |
https://security.gentoo.org/glsa/201603-05 |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Information
Published : 2014-11-07 11:55
Updated : 2023-02-12 16:42
NVD link : CVE-2014-3693
Mitre link : CVE-2014-3693
JSON object : View
CWE
Products Affected
redhat
- enterprise_linux_desktop
- enterprise_linux_workstation
- enterprise_linux_server
libreoffice
- libreoffice
canonical
- ubuntu_linux
opensuse
- opensuse