Test ID:	1.3.6.1.4.1.25623.1.0.841955
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-2331-1)
Summary:	The remote host is missing an update for the 'libreoffice' package(s) announced via the USN-2331-1 advisory.
Description:	Summary: The remote host is missing an update for the 'libreoffice' package(s) announced via the USN-2331-1 advisory. Vulnerability Insight: Rohan Durve and James Kettle discovered LibreOffice Calc sometimes allowed for command injection when opening spreadsheets. If a user were tricked into opening a crafted Calc spreadsheet, an attacker could exploit this to run programs as your login. Affected Software/OS: 'libreoffice' package(s) on Ubuntu 14.04. Solution: Please install the updated package(s). CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3524 1030755 http://www.securitytracker.com/id/1030755 20140821 CVE-2014-3524: Apache OpenOffice Calc Command Injection Vulnerability http://www.securityfocus.com/archive/1/533200/100/0/threaded 59600 http://secunia.com/advisories/59600 59877 http://secunia.com/advisories/59877 60235 http://secunia.com/advisories/60235 69351 http://www.securityfocus.com/bid/69351 GLSA-201603-05 https://security.gentoo.org/glsa/201603-05 apache-openoffice-cve20143524-command-exec(95421) https://exchange.xforce.ibmcloud.com/vulnerabilities/95421 http://blog.documentfoundation.org/2014/08/28/libreoffice-4-3-1-fresh-announced/ http://www.openoffice.org/security/cves/CVE-2014-3524.html
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.