Lucene search

K
mageiaGentoo FoundationMGASA-2014-0446
HistoryNov 14, 2014 - 4:24 a.m.

Updated libreoffice packages fix security vulnerability

2014-11-1404:24:42
Gentoo Foundation
advisories.mageia.org
6

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

59.0%

A vulnerability in LibreOffice allows an attacker to send a document which when opened will trigger the prompt to “Update Links” but if the user cancels that prompt may still generate and insert into the document an OLE2 preview image of a file on the victims filesystem, Data exposure is possible if the updated document is then distributed to other parties (CVE-2014-3575). LibreOffice has been patched to fix this issue.

OSVersionArchitecturePackageVersionFilename
Mageia3noarchlibreoffice< 4.0.6.2-3libreoffice-4.0.6.2-3.mga3

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

59.0%