CVE-2014-9093

2014-11-2615:59:00

CWE-20

[email protected]

web.nvd.nist.gov

libreoffice

cve-2014-9093

denial of service

code execution

remote attack

7.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.062 Low

EPSS

Percentile

93.5%

JSON

LibreOffice before 4.3.5 allows remote attackers to cause a denial of service (invalid write operation and crash) and possibly execute arbitrary code via a crafted RTF file.

CPENameOperatorVersion
libreoffice:libreofficelibreofficele4.3.4
fedoraproject:fedorafedoraproject fedoraeq20
canonical:ubuntu_linuxcanonical ubuntu linuxeq12.04
canonical:ubuntu_linuxcanonical ubuntu linuxeq14.10
canonical:ubuntu_linuxcanonical ubuntu linuxeq14.04
debian:debian_linuxdebian debian linuxeq7.0

CPE	Name	Operator	Version
libreoffice:libreoffice	libreoffice	le	4.3.4
fedoraproject:fedora	fedoraproject fedora	eq	20
canonical:ubuntu_linux	canonical ubuntu linux	eq	12.04
canonical:ubuntu_linux	canonical ubuntu linux	eq	14.10
canonical:ubuntu_linux	canonical ubuntu linux	eq	14.04
debian:debian_linux	debian debian linux	eq	7.0