CVE-2014-3575

The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow remote attackers to embed arbitrary data into documents via crafted OLE objects.

• CWE-200

• http://archives.neohapsis.com/archives/bugtraq/2014-08/0115.htmlBroken Link
• http://blog.documentfoundation.org/2014/08/28/libreoffice-4-3-1-fresh-announced/Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-September/137657.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0377.htmlThird Party Advisory
• http://secunia.com/advisories/59600Broken Link
• http://secunia.com/advisories/59877Broken Link
• http://www.openoffice.org/security/cves/CVE-2014-3575.htmlVendor Advisory
• http://www.securityfocus.com/bid/69354Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030754Broken Link, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95420Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201603-05Third Party Advisory
• http://archives.neohapsis.com/archives/bugtraq/2014-08/0115.htmlBroken Link
• http://blog.documentfoundation.org/2014/08/28/libreoffice-4-3-1-fresh-announced/Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-September/137657.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0377.htmlThird Party Advisory
• http://secunia.com/advisories/59600Broken Link
• http://secunia.com/advisories/59877Broken Link
• http://www.openoffice.org/security/cves/CVE-2014-3575.htmlVendor Advisory
• http://www.securityfocus.com/bid/69354Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030754Broken Link, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95420Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201603-05Third Party Advisory

Published

Aug 27, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3569The ssl23_get_client_hello function in s23_srvr.c in OpenSSL…
• CVE-2014-3570The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 b…
• CVE-2014-3571OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 befor…
• CVE-2014-3572The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL b…
• CVE-2014-3573The oVirt Engine backend module, as used in Red Hat Enterpri…
• CVE-2014-3574Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows…
• CVE-2014-3576The processControlCommand function in broker/TransportConnec…
• CVE-2014-3577org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComp…
• CVE-2014-3578Directory traversal vulnerability in Pivotal Spring Framewor…
• CVE-2014-3579XML external entity (XXE) vulnerability in Apache ActiveMQ A…
• CVE-2014-3580The mod_dav_svn Apache HTTPD server module in Apache Subvers…
• CVE-2014-3581The cache_merge_headers_out function in modules/cache/cache_…