Unrated severityNVD Advisory· Published Nov 7, 2014· Updated May 6, 2026
CVE-2014-3693
CVE-2014-3693
Description
Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to TCP port 1599.
Affected products
27cpe:2.3:a:libreoffice:libreoffice:4.0.0:*:*:*:*:*:*:*+ 20 more
- cpe:2.3:a:libreoffice:libreoffice:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:4.0.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:4.0.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:4.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:4.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:4.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:4.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:4.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:4.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:4.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:4.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:4.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:4.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:4.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:4.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:4.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:4.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:libreoffice:libreoffice:4.3.2:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*+ 1 more
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- www.ubuntu.com/usn/USN-2398-1nvdPatchThird Party Advisory
- lists.opensuse.org/opensuse-updates/2014-11/msg00049.htmlnvdThird Party Advisory
- rhn.redhat.com/errata/RHSA-2015-0377.htmlnvdThird Party Advisory
- www.libreoffice.org/about-us/security/advisories/CVE-2014-3693/nvdVendor Advisory
- secunia.com/advisories/62111nvd
- secunia.com/advisories/62132nvd
- secunia.com/advisories/62396nvd
- www.securityfocus.com/bid/71351nvd
- security.gentoo.org/glsa/201603-05nvd
News mentions
0No linked articles in our index yet.