CVE-2014-3524
Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly...
Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafted Calc spreadsheet.
Exploit likelihood
What each source reports
NVD Score used
Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafted Calc spreadsheet.
- Record
CVE-2014-3524- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-77
- Updated
- 2026-11-02
CVE List No score
Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafted Calc spreadsheet.
- Record
CVE-2014-3524- Updated
- 2026-11-02
EUVDEUVD-2014-3523 No score
Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafted Calc spreadsheet.
- Record
EUVD-2014-3523- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7h2p-mc8p-mxwq No score
Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly...
Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafted Calc spreadsheet.
- Record
GHSA-7h2p-mc8p-mxwq- Weakness
- CWE-77
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10006-1 No score
libreoffice-5.2.3.3-2.2 on GA media
These are all security issues fixed in the libreoffice-5.2.3.3-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10006-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-3524 No score
Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafted Calc spreadsheet.
- Record
UBUNTU-CVE-2014-3524- Updated
- 2026-11-02
OSVUSN-2331-1 No score
libreoffice vulnerability
Rohan Durve and James Kettle discovered LibreOffice Calc sometimes allowed for command injection when opening spreadsheets. If a user were tricked into opening a crafted Calc spreadsheet, an attacker could exploit this to run programs as your login.
- Record
USN-2331-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libreofficeUbuntu:14.04:LTS |
before 1:4.2.6.3-0ubuntu1, plus listed versions 1:4.1.2~rc3-0ubuntu11:4.1.2~rc3-0ubuntu21:4.1.3-0ubuntu21:4.1.3-0ubuntu31:4.2.0~rc4-0ubuntu1 Show 6 moreShow less1:4.2.0-0ubuntu11:4.2.1-0ubuntu11:4.2.3~rc2-0ubuntu11:4.2.3~rc3-0ubuntu11:4.2.3~rc3-0ubuntu21:4.2.4-0ubuntu2 |
1:4.2.6.3-0ubuntu1 |
libreofficeopenSUSE:Tumbleweed From an advisory covering 17 CVEs |
before 5.2.3.3-2.2 | 5.2.3.3-2.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-3524 is a high vulnerability (CVSS 9.3) in Apache Openoffice, published August 26, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 14.1%, the 96th percentile. Fixed in libreoffice 1:4.2.6.3-0ubuntu1.
References
securityfocus.com/bid/69351
secunia.com/advisories/60235
blog.documentfoundation.org/2014/08/28/libreoffice-4-3-1-fresh-announced
exchange.xforce.ibmcloud.com/vulnerabilities/95421
securitytracker.com/id/1030755
Show 27 moreShow less
openoffice.org/security/cves/CVE-2014-3524.html
security.gentoo.org/glsa/201603-05
nvd.nist.gov/vuln/detail/CVE-2014-3524
github.com/advisories/GHSA-7h2p-mc8p-mxwq
ubuntu.com/security/CVE-2014-3524
xforce.iss.net/xforce/xfdb/95421
cve.org/CVERecord?id=CVE-2014-3524
suse.com/security/cve/CVE-2010-2935