Launchpad.net

CVE 2014-3524

Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafted Calc spreadsheet.

See the CVE page on Mitre.org for more details.