Description
Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to TCP port 1599.
References (9)
Core 9
Core References
Vendor Advisory x_refsource_confirm
https://www.libreoffice.org/about-us/security/advisories/CVE-2014-3693/
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/62396
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/71351
Patch, Third Party Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2398-1
Third Party Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2015-0377.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/62132
Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2014-11/msg00049.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/62111
Third Party Advisory vendor-advisory
x_refsource_gentoo
https://security.gentoo.org/glsa/201603-05
Scores
EPSS
0.0495
EPSS Percentile
91.2%
Details
Status
published
Products (27)
canonical/ubuntu_linux
14.04
canonical/ubuntu_linux
14.10
libreoffice/libreoffice
4.0.0
libreoffice/libreoffice
4.0.1
libreoffice/libreoffice
4.0.2
libreoffice/libreoffice
4.0.3
libreoffice/libreoffice
4.0.3.3
libreoffice/libreoffice
4.0.4.2
libreoffice/libreoffice
4.1.0
libreoffice/libreoffice
4.1.1
... and 17 more
Published
Nov 07, 2014
Tracked Since
Feb 18, 2026