ID OPENVAS:1361412562310841868 Type openvas Reporter Copyright (C) 2014 Greenbone Networks GmbH Modified 2019-03-13T00:00:00
Description
The remote host is missing an update for the
###############################################################################
# OpenVAS Vulnerability Test
# $Id: gb_ubuntu_USN_2253_1.nasl 14140 2019-03-13 12:26:09Z cfischer $
#
# Ubuntu Update for libreoffice USN-2253-1
#
# Authors:
# System Generated Check
#
# Copyright:
# Copyright (C) 2014 Greenbone Networks GmbH, http://www.greenbone.net
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2
# (or any later version), as published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
###############################################################################
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.841868");
script_version("$Revision: 14140 $");
script_tag(name:"last_modification", value:"$Date: 2019-03-13 13:26:09 +0100 (Wed, 13 Mar 2019) $");
script_tag(name:"creation_date", value:"2014-07-01 21:33:25 +0530 (Tue, 01 Jul 2014)");
script_cve_id("CVE-2014-0247");
script_tag(name:"cvss_base", value:"10.0");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");
script_name("Ubuntu Update for libreoffice USN-2253-1");
script_tag(name:"affected", value:"libreoffice on Ubuntu 14.04 LTS");
script_tag(name:"insight", value:"It was discovered that LibreOffice unconditionally executed
certain VBA macros, contrary to user expectations.");
script_tag(name:"solution", value:"Please Install the Updated Packages.");
script_tag(name:"qod_type", value:"package");
script_tag(name:"solution_type", value:"VendorFix");
script_xref(name:"USN", value:"2253-1");
script_xref(name:"URL", value:"http://www.ubuntu.com/usn/usn-2253-1/");
script_tag(name:"summary", value:"The remote host is missing an update for the 'libreoffice'
package(s) announced via the referenced advisory.");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2014 Greenbone Networks GmbH");
script_family("Ubuntu Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/ubuntu_linux", "ssh/login/packages", re:"ssh/login/release=UBUNTU14\.04 LTS");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-deb.inc");
release = dpkg_get_ssh_release();
if(!release)
exit(0);
res = "";
if(release == "UBUNTU14.04 LTS")
{
if ((res = isdpkgvuln(pkg:"libreoffice-core", ver:"1:4.2.4-0ubuntu2", rls:"UBUNTU14.04 LTS")) != NULL)
{
security_message(data:res);
exit(0);
}
if (__pkg_match) exit(99);
exit(0);
}
{"id": "OPENVAS:1361412562310841868", "type": "openvas", "bulletinFamily": "scanner", "title": "Ubuntu Update for libreoffice USN-2253-1", "description": "The remote host is missing an update for the ", "published": "2014-07-01T00:00:00", "modified": "2019-03-13T00:00:00", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}, "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310841868", "reporter": "Copyright (C) 2014 Greenbone Networks GmbH", "references": ["2253-1", "http://www.ubuntu.com/usn/usn-2253-1/"], "cvelist": ["CVE-2014-0247"], "lastseen": "2019-05-29T18:37:42", "viewCount": 0, "enchantments": {"dependencies": {"references": [{"type": "cve", "idList": ["CVE-2014-0247"]}, {"type": "ubuntu", "idList": ["USN-2253-1"]}, {"type": "nessus", "idList": ["REDHAT-RHSA-2015-0377.NASL", "FEDORA_2014-7679.NASL", "CENTOS_RHSA-2015-0377.NASL", "SL_20150305_LIBREOFFICE_ON_SL7_X.NASL", "UBUNTU_USN-2253-1.NASL", "LIBREOFFICE_425.NASL", "MACOSX_LIBREOFFICE_425.NASL", "ORACLELINUX_ELSA-2015-0377.NASL", "OPENSUSE-2014-446.NASL", "GENTOO_GLSA-201408-19.NASL"]}, {"type": "kaspersky", "idList": ["KLA10242"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310804928", "OPENVAS:1361412562310121263", "OPENVAS:1361412562310123163", "OPENVAS:1361412562310804929", "OPENVAS:1361412562310867948"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:13857", "SECURITYVULNS:DOC:30908"]}, {"type": "debian", "idList": ["DEBIAN:BSA-096:958E6"]}, {"type": "redhat", "idList": ["RHSA-2015:0377"]}, {"type": "oraclelinux", "idList": ["ELSA-2015-0377"]}, {"type": "centos", "idList": ["CESA-2015:0377"]}, {"type": "gentoo", "idList": ["GLSA-201408-19"]}], "modified": "2019-05-29T18:37:42", "rev": 2}, "score": {"value": 7.3, "vector": "NONE", "modified": "2019-05-29T18:37:42", "rev": 2}, "vulnersScore": 7.3}, "pluginID": "1361412562310841868", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_ubuntu_USN_2253_1.nasl 14140 2019-03-13 12:26:09Z cfischer $\n#\n# Ubuntu Update for libreoffice USN-2253-1\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2014 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.841868\");\n script_version(\"$Revision: 14140 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-13 13:26:09 +0100 (Wed, 13 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2014-07-01 21:33:25 +0530 (Tue, 01 Jul 2014)\");\n script_cve_id(\"CVE-2014-0247\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_name(\"Ubuntu Update for libreoffice USN-2253-1\");\n\n script_tag(name:\"affected\", value:\"libreoffice on Ubuntu 14.04 LTS\");\n script_tag(name:\"insight\", value:\"It was discovered that LibreOffice unconditionally executed\ncertain VBA macros, contrary to user expectations.\");\n script_tag(name:\"solution\", value:\"Please Install the Updated Packages.\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_xref(name:\"USN\", value:\"2253-1\");\n script_xref(name:\"URL\", value:\"http://www.ubuntu.com/usn/usn-2253-1/\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'libreoffice'\n package(s) announced via the referenced advisory.\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2014 Greenbone Networks GmbH\");\n script_family(\"Ubuntu Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/ubuntu_linux\", \"ssh/login/packages\", re:\"ssh/login/release=UBUNTU14\\.04 LTS\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nrelease = dpkg_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"UBUNTU14.04 LTS\")\n{\n\n if ((res = isdpkgvuln(pkg:\"libreoffice-core\", ver:\"1:4.2.4-0ubuntu2\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "naslFamily": "Ubuntu Local Security Checks", "immutableFields": []}
{"cve": [{"lastseen": "2021-04-22T23:44:02", "description": "LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to doc/docmacromode.cxx.", "edition": 5, "cvss3": {}, "published": "2014-07-03T17:55:00", "title": "CVE-2014-0247", "type": "cve", "cwe": ["NVD-CWE-noinfo"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2014-0247"], "modified": "2018-10-30T16:27:00", "cpe": ["cpe:/o:fedoraproject:fedora:19", "cpe:/o:opensuse:opensuse:13.1", "cpe:/a:libreoffice:libreoffice:4.2.4", "cpe:/o:redhat:enterprise_linux_server:7.0", "cpe:/o:redhat:enterprise_linux_workstation:7.0", "cpe:/o:redhat:enterprise_linux_desktop:7.0", "cpe:/o:canonical:ubuntu_linux:14.04"], "id": "CVE-2014-0247", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0247", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*", "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*", "cpe:2.3:a:libreoffice:libreoffice:4.2.4:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"]}], "kaspersky": [{"lastseen": "2020-09-02T12:00:30", "bulletinFamily": "info", "cvelist": ["CVE-2014-0247"], "description": "### *Detect date*:\n07/03/2014\n\n### *Severity*:\nCritical\n\n### *Description*:\nAutomatic macros execution was found in LibreOffice. By exploiting this vulnerability malicious users can have an unspecified impact via unspecified attack vectors.\n\n### *Affected products*:\nLibreOffice versions from 4.1.4 to 4.2.4\n\n### *Solution*:\nUpdate to latest version \n[LibreOffice](<http://www.libreoffice.org/download/libreoffice-fresh/>)\n\n### *Original advisories*:\n[LibreOffice bulletin](<https://www.libreoffice.org/about-us/security/advisories/cve-2014-0247/>) \n\n\n### *Impacts*:\nSB \n\n### *Related products*:\n[LibreOffice](<https://threats.kaspersky.com/en/product/LibreOffice/>)\n\n### *CVE-IDS*:\n[CVE-2014-0247](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0247>)10.0Critical", "edition": 41, "modified": "2020-05-22T00:00:00", "published": "2014-07-03T00:00:00", "id": "KLA10242", "href": "https://threats.kaspersky.com/en/vulnerability/KLA10242", "title": "\r KLA10242Vulnerability in LibreOffice ", "type": "kaspersky", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "openvas": [{"lastseen": "2020-04-22T17:03:03", "bulletinFamily": "scanner", "cvelist": ["CVE-2014-0247"], "description": "This host is installed with LibreOffice\n and is prone to unspecified vulnerability.", "modified": "2020-04-20T00:00:00", "published": "2014-10-01T00:00:00", "id": "OPENVAS:1361412562310804928", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310804928", "type": "openvas", "title": "LibreOffice Unspecified Vulnerability Oct14 (Windows)", "sourceData": "#############################################################################/##\n# OpenVAS Vulnerability Test\n#\n# LibreOffice Unspecified Vulnerability Oct14 (Windows)\n#\n# Authors:\n# Deepmala <kdeepmala@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2014 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/a:libreoffice:libreoffice\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.804928\");\n script_version(\"2020-04-20T13:31:49+0000\");\n script_cve_id(\"CVE-2014-0247\");\n script_bugtraq_id(68151);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2020-04-20 13:31:49 +0000 (Mon, 20 Apr 2020)\");\n script_tag(name:\"creation_date\", value:\"2014-10-01 12:57:57 +0450 (Wed, 01 Oct 2014)\");\n\n script_name(\"LibreOffice Unspecified Vulnerability Oct14 (Windows)\");\n\n script_tag(name:\"summary\", value:\"This host is installed with LibreOffice\n and is prone to unspecified vulnerability.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Flaw exists due to the application not\n properly restricting VBA macros in the VBAProject element.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow attackers\n to bypass certain security restrictions and execute VBA script code without\n user approval.\");\n\n script_tag(name:\"affected\", value:\"LibreOffice version 4.1.4/4.2.0 prior\n to 4.2.5 on Windows\");\n\n script_tag(name:\"solution\", value:\"Upgrade to LibreOffice 4.2.5 or later.\");\n script_tag(name:\"qod_type\", value:\"registry\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_xref(name:\"URL\", value:\"http://secunia.com/advisories/57383\");\n script_xref(name:\"URL\", value:\"https://www.libreoffice.org/about-us/security/advisories/cve-2014-0247\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2014 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"gb_libreoffice_detect_portable_win.nasl\");\n script_mandatory_keys(\"LibreOffice/Win/Ver\");\n exit(0);\n}\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!libreVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(version_in_range(version:libreVer, test_version:\"4.1.4\", test_version2:\"4.2.4\"))\n{\n report = report_fixed_ver(installed_version:libreVer, vulnerable_range:\"4.1.4 - 4.2.4\");\n security_message(port:0, data:report);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-04-22T17:03:06", "bulletinFamily": "scanner", "cvelist": ["CVE-2014-0247"], "description": "This host is installed with LibreOffice\n and is prone to unspecified vulnerability.", "modified": "2020-04-20T00:00:00", "published": "2014-10-01T00:00:00", "id": "OPENVAS:1361412562310804929", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310804929", "type": "openvas", "title": "LibreOffice Unspecified Vulnerability Oct14 (Mac OS X)", "sourceData": "#############################################################################/##\n# OpenVAS Vulnerability Test\n#\n# LibreOffice Unspecified Vulnerability Oct14 (Mac OS X)\n#\n# Authors:\n# Deepmala <kdeepmala@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2014 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/a:libreoffice:libreoffice\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.804929\");\n script_version(\"2020-04-20T13:31:49+0000\");\n script_cve_id(\"CVE-2014-0247\");\n script_bugtraq_id(68151);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2020-04-20 13:31:49 +0000 (Mon, 20 Apr 2020)\");\n script_tag(name:\"creation_date\", value:\"2014-10-01 12:57:54 +0530 (Wed, 01 Oct 2014)\");\n\n script_name(\"LibreOffice Unspecified Vulnerability Oct14 (Mac OS X)\");\n\n script_tag(name:\"summary\", value:\"This host is installed with LibreOffice\n and is prone to unspecified vulnerability.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Flaw exists due to the application not\n properly restricting VBA macros in the VBAProject element.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow attackers\n to bypass certain security restrictions and execute VBA script code without\n user approval.\");\n\n script_tag(name:\"affected\", value:\"LibreOffice version 4.1.4/4.2.0 prior\n to 4.2.5 on Mac OS X\");\n\n script_tag(name:\"solution\", value:\"Upgrade to LibreOffice 4.2.5 or later.\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_xref(name:\"URL\", value:\"http://secunia.com/advisories/57383\");\n script_xref(name:\"URL\", value:\"https://www.libreoffice.org/about-us/security/advisories/cve-2014-0247\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2014 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"gb_libreoffice_detect_macosx.nasl\");\n script_mandatory_keys(\"LibreOffice/MacOSX/Version\");\n exit(0);\n}\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!libreVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(version_in_range(version:libreVer, test_version:\"4.1.4\", test_version2:\"4.2.4\"))\n{\n report = report_fixed_ver(installed_version:libreVer, vulnerable_range:\"4.1.4 - 4.2.4\");\n security_message(port:0, data:report);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:37:39", "bulletinFamily": "scanner", "cvelist": ["CVE-2014-0247"], "description": "The remote host is missing an update for the ", "modified": "2019-03-15T00:00:00", "published": "2014-07-07T00:00:00", "id": "OPENVAS:1361412562310867948", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310867948", "type": "openvas", "title": "Fedora Update for libreoffice FEDORA-2014-7679", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Fedora Update for libreoffice FEDORA-2014-7679\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2014 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.867948\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2014-07-07 12:31:45 +0530 (Mon, 07 Jul 2014)\");\n script_cve_id(\"CVE-2014-0247\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_name(\"Fedora Update for libreoffice FEDORA-2014-7679\");\n script_tag(name:\"affected\", value:\"libreoffice on Fedora 19\");\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_xref(name:\"FEDORA\", value:\"2014-7679\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/pipermail/package-announce/2014-July/135020.html\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'libreoffice'\n package(s) announced via the referenced advisory.\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2014 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC19\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC19\")\n{\n\n if ((res = isrpmvuln(pkg:\"libreoffice\", rpm:\"libreoffice~4.1.6.2~7.fc19\", rls:\"FC19\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:36:35", "bulletinFamily": "scanner", "cvelist": ["CVE-2014-3575", "CVE-2014-3693", "CVE-2014-0247"], "description": "Oracle Linux Local Security Checks ELSA-2015-0377", "modified": "2018-09-28T00:00:00", "published": "2015-10-06T00:00:00", "id": "OPENVAS:1361412562310123163", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310123163", "type": "openvas", "title": "Oracle Linux Local Check: ELSA-2015-0377", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: ELSA-2015-0377.nasl 11688 2018-09-28 13:36:28Z cfischer $\n#\n# Oracle Linux Local Check\n#\n# Authors:\n# Eero Volotinen <eero.volotinen@solinor.com>\n#\n# Copyright:\n# Copyright (c) 2015 Eero Volotinen, http://solinor.com\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.123163\");\n script_version(\"$Revision: 11688 $\");\n script_tag(name:\"creation_date\", value:\"2015-10-06 14:00:09 +0300 (Tue, 06 Oct 2015)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-09-28 15:36:28 +0200 (Fri, 28 Sep 2018) $\");\n script_name(\"Oracle Linux Local Check: ELSA-2015-0377\");\n script_tag(name:\"insight\", value:\"ELSA-2015-0377 - libreoffice security, bug fix, and enhancement update. Please see the references for more insight.\");\n script_tag(name:\"solution\", value:\"Update the affected packages to the latest available version.\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"summary\", value:\"Oracle Linux Local Security Checks ELSA-2015-0377\");\n script_xref(name:\"URL\", value:\"http://linux.oracle.com/errata/ELSA-2015-0377.html\");\n script_cve_id(\"CVE-2014-0247\", \"CVE-2014-3575\", \"CVE-2014-3693\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/oracle_linux\", \"ssh/login/release\", re:\"ssh/login/release=OracleLinux7\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Eero Volotinen\");\n script_family(\"Oracle Linux Local Security Checks\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"OracleLinux7\")\n{\n if ((res = isrpmvuln(pkg:\"autocorr-af\", rpm:\"autocorr-af~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-bg\", rpm:\"autocorr-bg~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-ca\", rpm:\"autocorr-ca~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-cs\", rpm:\"autocorr-cs~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-da\", rpm:\"autocorr-da~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-de\", rpm:\"autocorr-de~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-en\", rpm:\"autocorr-en~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-es\", rpm:\"autocorr-es~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-fa\", rpm:\"autocorr-fa~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-fi\", rpm:\"autocorr-fi~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-fr\", rpm:\"autocorr-fr~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-ga\", rpm:\"autocorr-ga~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-hr\", rpm:\"autocorr-hr~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-hu\", rpm:\"autocorr-hu~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-is\", rpm:\"autocorr-is~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-it\", rpm:\"autocorr-it~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-ja\", rpm:\"autocorr-ja~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-ko\", rpm:\"autocorr-ko~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-lb\", rpm:\"autocorr-lb~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-lt\", rpm:\"autocorr-lt~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-mn\", rpm:\"autocorr-mn~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-nl\", rpm:\"autocorr-nl~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-pl\", rpm:\"autocorr-pl~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-pt\", rpm:\"autocorr-pt~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-ro\", rpm:\"autocorr-ro~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-ru\", rpm:\"autocorr-ru~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-sk\", rpm:\"autocorr-sk~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-sl\", rpm:\"autocorr-sl~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-sr\", rpm:\"autocorr-sr~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-sv\", rpm:\"autocorr-sv~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-tr\", rpm:\"autocorr-tr~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-vi\", rpm:\"autocorr-vi~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"autocorr-zh\", rpm:\"autocorr-zh~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libabw\", rpm:\"libabw~0.0.2~1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libabw-devel\", rpm:\"libabw-devel~0.0.2~1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libabw-doc\", rpm:\"libabw-doc~0.0.2~1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libabw-tools\", rpm:\"libabw-tools~0.0.2~1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libcmis\", rpm:\"libcmis~0.4.1~5.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libcmis-devel\", rpm:\"libcmis-devel~0.4.1~5.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libcmis-tools\", rpm:\"libcmis-tools~0.4.1~5.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libetonyek\", rpm:\"libetonyek~0.0.4~2.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libetonyek-devel\", rpm:\"libetonyek-devel~0.0.4~2.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libetonyek-doc\", rpm:\"libetonyek-doc~0.0.4~2.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libetonyek-tools\", rpm:\"libetonyek-tools~0.0.4~2.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libfreehand\", rpm:\"libfreehand~0.0.0~3.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libfreehand-devel\", rpm:\"libfreehand-devel~0.0.0~3.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libfreehand-doc\", rpm:\"libfreehand-doc~0.0.0~3.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libfreehand-tools\", rpm:\"libfreehand-tools~0.0.0~3.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"liblangtag\", rpm:\"liblangtag~0.5.4~8.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"liblangtag-devel\", rpm:\"liblangtag-devel~0.5.4~8.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"liblangtag-doc\", rpm:\"liblangtag-doc~0.5.4~8.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"liblangtag-gobject\", rpm:\"liblangtag-gobject~0.5.4~8.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libmwaw\", rpm:\"libmwaw~0.2.0~4.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libmwaw-devel\", rpm:\"libmwaw-devel~0.2.0~4.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libmwaw-doc\", rpm:\"libmwaw-doc~0.2.0~4.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libmwaw-tools\", rpm:\"libmwaw-tools~0.2.0~4.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libodfgen\", rpm:\"libodfgen~0.0.4~1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libodfgen-devel\", rpm:\"libodfgen-devel~0.0.4~1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libodfgen-doc\", rpm:\"libodfgen-doc~0.0.4~1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice\", rpm:\"libreoffice~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-base\", rpm:\"libreoffice-base~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-bsh\", rpm:\"libreoffice-bsh~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-calc\", rpm:\"libreoffice-calc~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-core\", rpm:\"libreoffice-core~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-draw\", rpm:\"libreoffice-draw~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-emailmerge\", rpm:\"libreoffice-emailmerge~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-filters\", rpm:\"libreoffice-filters~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-gdb-debug-support\", rpm:\"libreoffice-gdb-debug-support~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-glade\", rpm:\"libreoffice-glade~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-graphicfilter\", rpm:\"libreoffice-graphicfilter~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-headless\", rpm:\"libreoffice-headless~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-impress\", rpm:\"libreoffice-impress~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-af\", rpm:\"libreoffice-langpack-af~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-ar\", rpm:\"libreoffice-langpack-ar~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-as\", rpm:\"libreoffice-langpack-as~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-bg\", rpm:\"libreoffice-langpack-bg~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-bn\", rpm:\"libreoffice-langpack-bn~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-br\", rpm:\"libreoffice-langpack-br~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-ca\", rpm:\"libreoffice-langpack-ca~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-cs\", rpm:\"libreoffice-langpack-cs~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-cy\", rpm:\"libreoffice-langpack-cy~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-da\", rpm:\"libreoffice-langpack-da~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-de\", rpm:\"libreoffice-langpack-de~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-dz\", rpm:\"libreoffice-langpack-dz~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-el\", rpm:\"libreoffice-langpack-el~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-en\", rpm:\"libreoffice-langpack-en~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-es\", rpm:\"libreoffice-langpack-es~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-et\", rpm:\"libreoffice-langpack-et~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-eu\", rpm:\"libreoffice-langpack-eu~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-fa\", rpm:\"libreoffice-langpack-fa~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-fi\", rpm:\"libreoffice-langpack-fi~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-fr\", rpm:\"libreoffice-langpack-fr~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-ga\", rpm:\"libreoffice-langpack-ga~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-gl\", rpm:\"libreoffice-langpack-gl~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-gu\", rpm:\"libreoffice-langpack-gu~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-he\", rpm:\"libreoffice-langpack-he~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-hi\", rpm:\"libreoffice-langpack-hi~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-hr\", rpm:\"libreoffice-langpack-hr~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-hu\", rpm:\"libreoffice-langpack-hu~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-it\", rpm:\"libreoffice-langpack-it~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-ja\", rpm:\"libreoffice-langpack-ja~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-kk\", rpm:\"libreoffice-langpack-kk~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-kn\", rpm:\"libreoffice-langpack-kn~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-ko\", rpm:\"libreoffice-langpack-ko~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-lt\", rpm:\"libreoffice-langpack-lt~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-lv\", rpm:\"libreoffice-langpack-lv~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-mai\", rpm:\"libreoffice-langpack-mai~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-ml\", rpm:\"libreoffice-langpack-ml~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-mr\", rpm:\"libreoffice-langpack-mr~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-nb\", rpm:\"libreoffice-langpack-nb~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-nl\", rpm:\"libreoffice-langpack-nl~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-nn\", rpm:\"libreoffice-langpack-nn~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-nr\", rpm:\"libreoffice-langpack-nr~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-nso\", rpm:\"libreoffice-langpack-nso~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-or\", rpm:\"libreoffice-langpack-or~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-pa\", rpm:\"libreoffice-langpack-pa~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-pl\", rpm:\"libreoffice-langpack-pl~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-pt-BR\", rpm:\"libreoffice-langpack-pt-BR~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-pt-PT\", rpm:\"libreoffice-langpack-pt-PT~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-ro\", rpm:\"libreoffice-langpack-ro~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-ru\", rpm:\"libreoffice-langpack-ru~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-si\", rpm:\"libreoffice-langpack-si~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-sk\", rpm:\"libreoffice-langpack-sk~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-sl\", rpm:\"libreoffice-langpack-sl~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-sr\", rpm:\"libreoffice-langpack-sr~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-ss\", rpm:\"libreoffice-langpack-ss~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-st\", rpm:\"libreoffice-langpack-st~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-sv\", rpm:\"libreoffice-langpack-sv~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-ta\", rpm:\"libreoffice-langpack-ta~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-te\", rpm:\"libreoffice-langpack-te~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-th\", rpm:\"libreoffice-langpack-th~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-tn\", rpm:\"libreoffice-langpack-tn~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-tr\", rpm:\"libreoffice-langpack-tr~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-ts\", rpm:\"libreoffice-langpack-ts~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-uk\", rpm:\"libreoffice-langpack-uk~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-ve\", rpm:\"libreoffice-langpack-ve~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-xh\", rpm:\"libreoffice-langpack-xh~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-zh-Hans\", rpm:\"libreoffice-langpack-zh-Hans~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-zh-Hant\", rpm:\"libreoffice-langpack-zh-Hant~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-langpack-zu\", rpm:\"libreoffice-langpack-zu~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-librelogo\", rpm:\"libreoffice-librelogo~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-math\", rpm:\"libreoffice-math~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-nlpsolver\", rpm:\"libreoffice-nlpsolver~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-ogltrans\", rpm:\"libreoffice-ogltrans~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-opensymbol-fonts\", rpm:\"libreoffice-opensymbol-fonts~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-pdfimport\", rpm:\"libreoffice-pdfimport~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-postgresql\", rpm:\"libreoffice-postgresql~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-pyuno\", rpm:\"libreoffice-pyuno~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-rhino\", rpm:\"libreoffice-rhino~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-sdk\", rpm:\"libreoffice-sdk~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-sdk-doc\", rpm:\"libreoffice-sdk-doc~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-ure\", rpm:\"libreoffice-ure~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-wiki-publisher\", rpm:\"libreoffice-wiki-publisher~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-writer\", rpm:\"libreoffice-writer~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"libreoffice-xsltfilter\", rpm:\"libreoffice-xsltfilter~4.2.6.3~5.0.1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"mdds-devel\", rpm:\"mdds-devel~0.10.3~1.el7\", rls:\"OracleLinux7\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n\n}\nif (__pkg_match) exit(99);\n exit(0);\n\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:36:24", "bulletinFamily": "scanner", "cvelist": ["CVE-2012-0037", "CVE-2009-3302", "CVE-2012-2665", "CVE-2010-3450", "CVE-2009-3301", "CVE-2009-0217", "CVE-2009-0200", "CVE-2009-2949", "CVE-2012-2149", "CVE-2011-2713", "CVE-2006-4339", "CVE-2010-3689", "CVE-2010-4253", "CVE-2012-2334", "CVE-2010-2935", "CVE-2010-3451", "CVE-2010-0395", "CVE-2009-2950", "CVE-2010-3454", "CVE-2010-4643", "CVE-2010-3453", "CVE-2014-0247", "CVE-2010-2936", "CVE-2009-0201", "CVE-2012-1149", "CVE-2010-3452"], "description": "Gentoo Linux Local Security Checks GLSA 201408-19", "modified": "2018-10-26T00:00:00", "published": "2015-09-29T00:00:00", "id": "OPENVAS:1361412562310121263", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310121263", "type": "openvas", "title": "Gentoo Security Advisory GLSA 201408-19", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: glsa-201408-19.nasl 12128 2018-10-26 13:35:25Z cfischer $\n#\n# Gentoo Linux security check\n#\n# Authors:\n# Eero Volotinen <eero.volotinen@solinor.com>\n#\n# Copyright:\n# Copyright (c) 2015 Eero Volotinen, http://solinor.com\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.121263\");\n script_version(\"$Revision: 12128 $\");\n script_tag(name:\"creation_date\", value:\"2015-09-29 11:27:50 +0300 (Tue, 29 Sep 2015)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-10-26 15:35:25 +0200 (Fri, 26 Oct 2018) $\");\n script_name(\"Gentoo Security Advisory GLSA 201408-19\");\n script_tag(name:\"insight\", value:\"Multiple vulnerabilities have been discovered in OpenOffice and Libreoffice. Please review the CVE identifiers referenced below for details.\");\n script_tag(name:\"solution\", value:\"Update the affected packages to the latest available version.\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_xref(name:\"URL\", value:\"https://security.gentoo.org/glsa/201408-19\");\n script_cve_id(\"CVE-2006-4339\", \"CVE-2009-0200\", \"CVE-2009-0201\", \"CVE-2009-0217\", \"CVE-2009-2949\", \"CVE-2009-2950\", \"CVE-2009-3301\", \"CVE-2009-3302\", \"CVE-2010-0395\", \"CVE-2010-2935\", \"CVE-2010-2936\", \"CVE-2010-3450\", \"CVE-2010-3451\", \"CVE-2010-3452\", \"CVE-2010-3453\", \"CVE-2010-3454\", \"CVE-2010-3689\", \"CVE-2010-4253\", \"CVE-2010-4643\", \"CVE-2011-2713\", \"CVE-2012-0037\", \"CVE-2012-1149\", \"CVE-2012-2149\", \"CVE-2012-2334\", \"CVE-2012-2665\", \"CVE-2014-0247\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/gentoo\", \"ssh/login/pkg\");\n script_category(ACT_GATHER_INFO);\n script_tag(name:\"summary\", value:\"Gentoo Linux Local Security Checks GLSA 201408-19\");\n script_copyright(\"Eero Volotinen\");\n script_family(\"Gentoo Local Security Checks\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-gentoo.inc\");\n\nres = \"\";\nreport = \"\";\n\nif((res=ispkgvuln(pkg:\"app-office/openoffice-bin\", unaffected: make_list(\"ge 3.5.5.3\"), vulnerable: make_list(\"lt 3.5.5.3\"))) != NULL) {\n\n report += res;\n}\nif((res=ispkgvuln(pkg:\"app-office/openoffice\", unaffected: make_list(), vulnerable: make_list(\"lt 3.5.5.3\"))) != NULL) {\n\n report += res;\n}\nif((res=ispkgvuln(pkg:\"app-office/libreoffice\", unaffected: make_list(\"ge 4.2.5.2\"), vulnerable: make_list(\"lt 4.2.5.2\"))) != NULL) {\n\n report += res;\n}\nif((res=ispkgvuln(pkg:\"app-office/libreoffice-bin\", unaffected: make_list(\"ge 4.2.5.2\"), vulnerable: make_list(\"lt 4.2.5.2\"))) != NULL) {\n report += res;\n}\n\nif(report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "fedora": [{"lastseen": "2020-12-21T08:17:52", "bulletinFamily": "unix", "cvelist": ["CVE-2014-0247"], "description": "LibreOffice is an Open Source, community-developed, office productivity sui te. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office suites. Sophisticat ed and flexible, LibreOffice also works transparently with a variety of file formats, including Microsoft Office File Formats. ", "modified": "2014-07-03T04:07:45", "published": "2014-07-03T04:07:45", "id": "FEDORA:57C36215B1", "href": "", "type": "fedora", "title": "[SECURITY] Fedora 19 Update: libreoffice-4.1.6.2-7.fc19", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "nessus": [{"lastseen": "2021-01-20T15:27:24", "description": "It was discovered that LibreOffice unconditionally executed certain\nVBA macros, contrary to user expectations.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 21, "published": "2014-06-24T00:00:00", "title": "Ubuntu 14.04 LTS : libreoffice vulnerability (USN-2253-1)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2014-0247"], "modified": "2014-06-24T00:00:00", "cpe": ["p-cpe:/a:canonical:ubuntu_linux:libreoffice-core", "cpe:/o:canonical:ubuntu_linux:14.04"], "id": "UBUNTU_USN-2253-1.NASL", "href": "https://www.tenable.com/plugins/nessus/76200", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Ubuntu Security Notice USN-2253-1. The text \n# itself is copyright (C) Canonical, Inc. See \n# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered \n# trademark of Canonical, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(76200);\n script_version(\"1.7\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/19\");\n\n script_cve_id(\"CVE-2014-0247\");\n script_xref(name:\"USN\", value:\"2253-1\");\n\n script_name(english:\"Ubuntu 14.04 LTS : libreoffice vulnerability (USN-2253-1)\");\n script_summary(english:\"Checks dpkg output for updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Ubuntu host is missing a security-related patch.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"It was discovered that LibreOffice unconditionally executed certain\nVBA macros, contrary to user expectations.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://usn.ubuntu.com/2253-1/\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected libreoffice-core package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:libreoffice-core\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:14.04\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2014/07/03\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2014/06/23\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2014/06/24\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"Ubuntu Security Notice (C) 2014-2020 Canonical, Inc. / NASL script (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Ubuntu Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/cpu\", \"Host/Ubuntu\", \"Host/Ubuntu/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"ubuntu.inc\");\ninclude(\"misc_func.inc\");\n\nif ( ! get_kb_item(\"Host/local_checks_enabled\") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Ubuntu/release\");\nif ( isnull(release) ) audit(AUDIT_OS_NOT, \"Ubuntu\");\nrelease = chomp(release);\nif (! preg(pattern:\"^(14\\.04)$\", string:release)) audit(AUDIT_OS_NOT, \"Ubuntu 14.04\", \"Ubuntu \" + release);\nif ( ! get_kb_item(\"Host/Debian/dpkg-l\") ) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Ubuntu\", cpu);\n\nflag = 0;\n\nif (ubuntu_check(osver:\"14.04\", pkgname:\"libreoffice-core\", pkgver:\"1:4.2.4-0ubuntu2\")) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : ubuntu_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = ubuntu_pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"libreoffice-core\");\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-04-01T03:56:58", "description": "A version of LibreOffice is installed on the remote Mac OS X host that\nis between versions 4.1.4 and 4.2.4. It is, therefore, affected by a\nvulnerability that allows the execution of unspecified VBA macros\nautomatically.\n\nNote that Nessus has not attempted to exploit this issue, but has\ninstead relied only on the application's self-reported version number.", "edition": 28, "published": "2014-07-18T00:00:00", "title": "LibreOffice < 4.2.5 Unspecified Macro Code Execution (Mac OS X)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2014-0247"], "modified": "2021-04-02T00:00:00", "cpe": ["cpe:/a:libreoffice:libreoffice"], "id": "MACOSX_LIBREOFFICE_425.NASL", "href": "https://www.tenable.com/plugins/nessus/76595", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(76595);\n script_version(\"1.3\");\n script_cvs_date(\"Date: 2018/07/14 1:59:36\");\n\n script_cve_id(\"CVE-2014-0247\");\n script_bugtraq_id(68151);\n\n script_name(english:\"LibreOffice < 4.2.5 Unspecified Macro Code Execution (Mac OS X)\");\n script_summary(english:\"Checks the version of LibreOffice.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote host contains an application that is affected by a\nvulnerability that allows unspecified VBA macro execution.\");\n script_set_attribute(attribute:\"description\", value:\n\"A version of LibreOffice is installed on the remote Mac OS X host that\nis between versions 4.1.4 and 4.2.4. It is, therefore, affected by a\nvulnerability that allows the execution of unspecified VBA macros\nautomatically.\n\nNote that Nessus has not attempted to exploit this issue, but has\ninstead relied only on the application's self-reported version number.\");\n script_set_attribute(attribute:\"solution\", value:\"Upgrade to LibreOffice version 4.2.5 or later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n script_set_attribute(attribute:\"see_also\", value:\"http://www.libreoffice.org/about-us/security/advisories/CVE-2014-0247\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2014/06/23\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2014/06/20\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2014/07/18\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:libreoffice:libreoffice\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"MacOS X Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2014-2018 Tenable Network Security, Inc.\");\n script_dependencies(\"macosx_libreoffice_installed.nasl\");\n script_require_keys(\"MacOSX/LibreOffice/Version\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\n\nkb_base = \"MacOSX/LibreOffice\";\nget_kb_item_or_exit(kb_base+\"/Installed\");\npath = get_kb_item_or_exit(kb_base+\"/Path\", exit_code:1);\nversion = get_kb_item_or_exit(kb_base+\"/Version\", exit_code:1);\n\nif (version =~ \"^4\\.(1\\.[4-6]|2($|\\.[0-4]))($|[^0-9])\")\n{\n if (report_verbosity > 0)\n {\n report =\n '\\n Path : ' + path +\n '\\n Installed version : ' + version +\n '\\n Fixed version : 4.2.5' +\n '\\n';\n security_hole(port:0, extra:report);\n }\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_INST_PATH_NOT_VULN, \"LibreOffice\", version, path);\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-04-01T03:35:02", "description": "A version of LibreOffice is installed on the remote Windows host that\nis between versions 4.1.4 and 4.2.4. It is, therefore, affected by a\nvulnerability that allows the execution of unspecified VBA macros\nautomatically.\n\nNote that Nessus has not attempted to exploit this issue, but has\ninstead relied only on the application's self-reported version number.", "edition": 28, "published": "2014-07-18T00:00:00", "title": "LibreOffice < 4.2.5 Unspecified Macro Code Execution", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2014-0247"], "modified": "2021-04-02T00:00:00", "cpe": ["cpe:/a:libreoffice:libreoffice"], "id": "LIBREOFFICE_425.NASL", "href": "https://www.tenable.com/plugins/nessus/76594", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(76594);\n script_version(\"1.3\");\n script_cvs_date(\"Date: 2018/07/12 19:01:17\");\n\n script_cve_id(\"CVE-2014-0247\");\n script_bugtraq_id(68151);\n\n script_name(english:\"LibreOffice < 4.2.5 Unspecified Macro Code Execution\");\n script_summary(english:\"Checks the version of LibreOffice.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote host contains an application that is affected by a\nvulnerability that allows unspecified VBA macro execution.\");\n script_set_attribute(attribute:\"description\", value:\n\"A version of LibreOffice is installed on the remote Windows host that\nis between versions 4.1.4 and 4.2.4. It is, therefore, affected by a\nvulnerability that allows the execution of unspecified VBA macros\nautomatically.\n\nNote that Nessus has not attempted to exploit this issue, but has\ninstead relied only on the application's self-reported version number.\");\n script_set_attribute(attribute:\"solution\", value:\"Upgrade to LibreOffice version 4.2.5 or later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n script_set_attribute(attribute:\"see_also\", value:\"http://www.libreoffice.org/about-us/security/advisories/CVE-2014-0247\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2014/06/23\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2014/06/20\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2014/07/18\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:libreoffice:libreoffice\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2014-2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"libreoffice_installed.nasl\");\n script_require_keys(\"SMB/LibreOffice/Version\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\n\nkb_base = \"SMB/LibreOffice\";\nversion = get_kb_item_or_exit(kb_base+\"/Version\");\npath = get_kb_item_or_exit(kb_base+\"/Path\", exit_code:1);\nversion_ui = get_kb_item_or_exit(kb_base+\"/Version_UI\", exit_code:1);\n\n# Versions 4.1.4-4.1.6 and 4.2-4.2.4 are affected\nif (version =~ \"^4\\.(1\\.[4-6]|2($|\\.[0-4]))($|[^0-9])\")\n{\n port = get_kb_item(\"SMB/transport\");\n if (!port) port = 445;\n\n if (report_verbosity > 0)\n {\n report =\n '\\n Path : ' + path +\n '\\n Installed version : ' + version_ui +\n '\\n Fixed version : 4.2.5' +\n '\\n';\n security_hole(port:port, extra:report);\n }\n else security_hole(port);\n}\nelse audit(AUDIT_INST_PATH_NOT_VULN, \"LibreOffice\", version_ui, path);\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-01-20T12:27:45", "description": "libreoffice was updated to version 4.1.6.2, thereby fixing over 80\nbugs.\n\nThis security issue was fixed :\n\n - VBA macros executed unconditionally (CVE-2014-0247)", "edition": 18, "published": "2014-07-02T00:00:00", "title": "openSUSE Security Update : libreoffice (openSUSE-SU-2014:0860-1)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2014-0247"], "modified": "2014-07-02T00:00:00", "cpe": ["p-cpe:/a:novell:opensuse:libreoffice-mailmerge", "p-cpe:/a:novell:opensuse:libreoffice-l10n-de", "p-cpe:/a:novell:opensuse:libreoffice-l10n-af", "p-cpe:/a:novell:opensuse:libreoffice-l10n-ru", "p-cpe:/a:novell:opensuse:libreoffice", "p-cpe:/a:novell:opensuse:libreoffice-l10n-kn", "p-cpe:/a:novell:opensuse:libreoffice-l10n-st", "p-cpe:/a:novell:opensuse:libreoffice-l10n-om", "p-cpe:/a:novell:opensuse:libreoffice-l10n-bg", "p-cpe:/a:novell:opensuse:libreoffice-l10n-pa-IN", "p-cpe:/a:novell:opensuse:libreoffice-help-ja", "p-cpe:/a:novell:opensuse:libreoffice-impress-extensions", "p-cpe:/a:novell:opensuse:libreoffice-l10n-el", "p-cpe:/a:novell:opensuse:libreoffice-help-sl", "p-cpe:/a:novell:opensuse:libreoffice-l10n-rw", "p-cpe:/a:novell:opensuse:libreoffice-officebean", "p-cpe:/a:novell:opensuse:libreoffice-l10n-eu", "p-cpe:/a:novell:opensuse:libreoffice-help-ru", "p-cpe:/a:novell:opensuse:libreoffice-help-en-US", "p-cpe:/a:novell:opensuse:libreoffice-draw-debuginfo", "p-cpe:/a:novell:opensuse:libreoffice-l10n-ar", "p-cpe:/a:novell:opensuse:libreoffice-math-debuginfo", "p-cpe:/a:novell:opensuse:libreoffice-l10n-en-GB", "p-cpe:/a:novell:opensuse:libreoffice-l10n-ts", "p-cpe:/a:novell:opensuse:libreoffice-debugsource", "p-cpe:/a:novell:opensuse:libreoffice-l10n-uk", "p-cpe:/a:novell:opensuse:libreoffice-gnome-debuginfo", "p-cpe:/a:novell:opensuse:libreoffice-l10n-eo", "p-cpe:/a:novell:opensuse:libreoffice-help-nl", "p-cpe:/a:novell:opensuse:libreoffice-l10n-br", "p-cpe:/a:novell:opensuse:libreoffice-l10n-te", "p-cpe:/a:novell:opensuse:libreoffice-help-en-GB", "p-cpe:/a:novell:opensuse:libreoffice-l10n-nn", "p-cpe:/a:novell:opensuse:libreoffice-l10n-nb", "p-cpe:/a:novell:opensuse:libreoffice-help-en-ZA", "p-cpe:/a:novell:opensuse:libreoffice-pyuno-debuginfo", "p-cpe:/a:novell:opensuse:libreoffice-icon-theme-galaxy", "p-cpe:/a:novell:opensuse:libreoffice-icon-themes-prebuilt", "p-cpe:/a:novell:opensuse:libreoffice-help-da", "p-cpe:/a:novell:opensuse:libreoffice-debuginfo", "p-cpe:/a:novell:opensuse:libreoffice-help-pt", "p-cpe:/a:novell:opensuse:libreoffice-l10n-da", "p-cpe:/a:novell:opensuse:libreoffice-base", "p-cpe:/a:novell:opensuse:libreoffice-help-nb", "p-cpe:/a:novell:opensuse:libreoffice-l10n-sv", "p-cpe:/a:novell:opensuse:libreoffice-help-vi", "p-cpe:/a:novell:opensuse:libreoffice-l10n-sl", "p-cpe:/a:novell:opensuse:libreoffice-l10n-zh-CN", "p-cpe:/a:novell:opensuse:libreoffice-base-debuginfo", "p-cpe:/a:novell:opensuse:libreoffice-l10n-tg", "p-cpe:/a:novell:opensuse:libreoffice-l10n-cy", "p-cpe:/a:novell:opensuse:libreoffice-l10n-id", "p-cpe:/a:novell:opensuse:libreoffice-l10n-fi", "p-cpe:/a:novell:opensuse:libreoffice-l10n-is", "p-cpe:/a:novell:opensuse:libreoffice-l10n-sr", "p-cpe:/a:novell:opensuse:libreoffice-l10n-sk", "p-cpe:/a:novell:opensuse:libreoffice-l10n-es", "p-cpe:/a:novell:opensuse:libreoffice-l10n-ko", "p-cpe:/a:novell:opensuse:libreoffice-l10n-ml", "p-cpe:/a:novell:opensuse:libreoffice-l10n-zh-TW", "p-cpe:/a:novell:opensuse:libreoffice-draw-extensions", "p-cpe:/a:novell:opensuse:libreoffice-l10n-nl", "p-cpe:/a:novell:opensuse:libreoffice-help-gl", "p-cpe:/a:novell:opensuse:libreoffice-l10n-hu", "p-cpe:/a:novell:opensuse:libreoffice-l10n-he", "p-cpe:/a:novell:opensuse:libreoffice-l10n-th", "p-cpe:/a:novell:opensuse:libreoffice-help-pl", "p-cpe:/a:novell:opensuse:libreoffice-sdk-debuginfo", "p-cpe:/a:novell:opensuse:libreoffice-icon-theme-hicontrast", "p-cpe:/a:novell:opensuse:libreoffice-l10n-or", "p-cpe:/a:novell:opensuse:libreoffice-l10n-ss", "p-cpe:/a:novell:opensuse:libreoffice-l10n-ve", "p-cpe:/a:novell:opensuse:libreoffice-l10n-ast", "p-cpe:/a:novell:opensuse:libreoffice-l10n-am", "p-cpe:/a:novell:opensuse:libreoffice-help-cs", "p-cpe:/a:novell:opensuse:libreoffice-help-el", "p-cpe:/a:novell:opensuse:libreoffice-help-eu", "p-cpe:/a:novell:opensuse:libreoffice-impress-extensions-debuginfo", "p-cpe:/a:novell:opensuse:libreoffice-l10n-et", "p-cpe:/a:novell:opensuse:libreoffice-writer", "p-cpe:/a:novell:opensuse:libreoffice-base-drivers-mysql", "p-cpe:/a:novell:opensuse:libreoffice-l10n-gd", "p-cpe:/a:novell:opensuse:libreoffice-l10n-ug", "p-cpe:/a:novell:opensuse:libreoffice-calc-extensions", "p-cpe:/a:novell:opensuse:libreoffice-l10n-gl", "p-cpe:/a:novell:opensuse:libreoffice-officebean-debuginfo", "p-cpe:/a:novell:opensuse:libreoffice-help-gu-IN", "p-cpe:/a:novell:opensuse:libreoffice-impress-debuginfo", "p-cpe:/a:novell:opensuse:libreoffice-icon-theme-oxygen", "p-cpe:/a:novell:opensuse:libreoffice-base-drivers-postgresql", "p-cpe:/a:novell:opensuse:libreoffice-l10n-hi-IN", "p-cpe:/a:novell:opensuse:libreoffice-draw", "p-cpe:/a:novell:opensuse:libreoffice-calc-debuginfo", "p-cpe:/a:novell:opensuse:libreoffice-icon-theme-tango", "p-cpe:/a:novell:opensuse:libreoffice-l10n-vi", "p-cpe:/a:novell:opensuse:libreoffice-help-ast", "p-cpe:/a:novell:opensuse:libreoffice-impress", "p-cpe:/a:novell:opensuse:libreoffice-l10n-lt", "p-cpe:/a:novell:opensuse:libreoffice-l10n-ca", "p-cpe:/a:novell:opensuse:libreoffice-filters-optional", "p-cpe:/a:novell:opensuse:libreoffice-l10n-be-BY", "p-cpe:/a:novell:opensuse:libreoffice-help-ko", "p-cpe:/a:novell:opensuse:libreoffice-l10n-hr", "p-cpe:/a:novell:opensuse:libreoffice-l10n-ro", "p-cpe:/a:novell:opensuse:libreoffice-writer-extensions", "p-cpe:/a:novell:opensuse:libreoffice-help-fr", "p-cpe:/a:novell:opensuse:libreoffice-l10n-ja", "p-cpe:/a:novell:opensuse:libreoffice-kde", "p-cpe:/a:novell:opensuse:libreoffice-kde4", "p-cpe:/a:novell:opensuse:libreoffice-help-km", "p-cpe:/a:novell:opensuse:libreoffice-help-it", "p-cpe:/a:novell:opensuse:libreoffice-l10n-ta", "p-cpe:/a:novell:opensuse:libreoffice-math", "p-cpe:/a:novell:opensuse:libreoffice-help-es", "p-cpe:/a:novell:opensuse:libreoffice-help-hi-IN", "p-cpe:/a:novell:opensuse:libreoffice-help-tr", "p-cpe:/a:novell:opensuse:libreoffice-l10n-pt-BR", "p-cpe:/a:novell:opensuse:libreoffice-l10n-it", "p-cpe:/a:novell:opensuse:libreoffice-l10n-nr", "p-cpe:/a:novell:opensuse:libreoffice-writer-debuginfo", "p-cpe:/a:novell:opensuse:libreoffice-l10n-ka", "p-cpe:/a:novell:opensuse:libreoffice-l10n-prebuilt", "p-cpe:/a:novell:opensuse:libreoffice-help-pt-BR", "p-cpe:/a:novell:opensuse:libreoffice-l10n-sh", "p-cpe:/a:novell:opensuse:libreoffice-help-bg", "p-cpe:/a:novell:opensuse:libreoffice-l10n-en-ZA", "p-cpe:/a:novell:opensuse:libreoffice-kde-debuginfo", "p-cpe:/a:novell:opensuse:libreoffice-base-drivers-mysql-debuginfo", "p-cpe:/a:novell:opensuse:libreoffice-help-sv", "p-cpe:/a:novell:opensuse:libreoffice-l10n-km", "p-cpe:/a:novell:opensuse:libreoffice-l10n-tr", "p-cpe:/a:novell:opensuse:libreoffice-help-sk", "p-cpe:/a:novell:opensuse:libreoffice-l10n-pl", "p-cpe:/a:novell:opensuse:libreoffice-help-et", "p-cpe:/a:novell:opensuse:libreoffice-l10n-pt", "p-cpe:/a:novell:opensuse:libreoffice-l10n-as", "p-cpe:/a:novell:opensuse:libreoffice-pyuno", "p-cpe:/a:novell:opensuse:libreoffice-calc", "p-cpe:/a:novell:opensuse:libreoffice-icon-theme-crystal", "p-cpe:/a:novell:opensuse:libreoffice-l10n-gu-IN", "p-cpe:/a:novell:opensuse:libreoffice-kde4-debuginfo", "p-cpe:/a:novell:opensuse:libreoffice-l10n-cs", "p-cpe:/a:novell:opensuse:libreoffice-base-drivers-postgresql-debuginfo", "p-cpe:/a:novell:opensuse:libreoffice-sdk", "p-cpe:/a:novell:opensuse:libreoffice-help-zh-CN", "p-cpe:/a:novell:opensuse:libreoffice-l10n-xh", "p-cpe:/a:novell:opensuse:libreoffice-gnome", "p-cpe:/a:novell:opensuse:libreoffice-help-fi", "p-cpe:/a:novell:opensuse:libreoffice-l10n-ga", "p-cpe:/a:novell:opensuse:libreoffice-l10n-mr", "p-cpe:/a:novell:opensuse:libreoffice-help-mk", "p-cpe:/a:novell:opensuse:libreoffice-branding-upstream", "p-cpe:/a:novell:opensuse:libreoffice-help-zh-TW", "p-cpe:/a:novell:opensuse:libreoffice-l10n-fr", "p-cpe:/a:novell:opensuse:libreoffice-help-ca", "cpe:/o:novell:opensuse:13.1", "p-cpe:/a:novell:opensuse:libreoffice-help-de", "p-cpe:/a:novell:opensuse:libreoffice-base-extensions", "p-cpe:/a:novell:opensuse:libreoffice-l10n-mk", "p-cpe:/a:novell:opensuse:libreoffice-help-hu", "p-cpe:/a:novell:opensuse:libreoffice-l10n-zu"], "id": "OPENSUSE-2014-446.NASL", "href": "https://www.tenable.com/plugins/nessus/76337", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from openSUSE Security Update openSUSE-2014-446.\n#\n# The text description of this plugin is (C) SUSE LLC.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(76337);\n script_version(\"1.5\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/19\");\n\n script_cve_id(\"CVE-2014-0247\");\n\n script_name(english:\"openSUSE Security Update : libreoffice (openSUSE-SU-2014:0860-1)\");\n script_summary(english:\"Check for the openSUSE-2014-446 patch\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote openSUSE host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"libreoffice was updated to version 4.1.6.2, thereby fixing over 80\nbugs.\n\nThis security issue was fixed :\n\n - VBA macros executed unconditionally (CVE-2014-0247)\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.novell.com/show_bug.cgi?id=249775\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.novell.com/show_bug.cgi?id=404254\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.novell.com/show_bug.cgi?id=407958\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.novell.com/show_bug.cgi?id=410982\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.novell.com/show_bug.cgi?id=411855\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.novell.com/show_bug.cgi?id=414248\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.novell.com/show_bug.cgi?id=417316\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.novell.com/show_bug.cgi?id=417320\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.novell.com/show_bug.cgi?id=418307\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.novell.com/show_bug.cgi?id=421939\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.novell.com/show_bug.cgi?id=422206\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.novell.com/show_bug.cgi?id=422559\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.novell.com/show_bug.cgi?id=422569\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.novell.com/show_bug.cgi?id=422677\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.novell.com/show_bug.cgi?id=758883\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.novell.com/show_bug.cgi?id=766481\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.novell.com/show_bug.cgi?id=766487\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.novell.com/show_bug.cgi?id=779697\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.novell.com/show_bug.cgi?id=821208\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.novell.com/show_bug.cgi?id=879996\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://lists.opensuse.org/opensuse-updates/2014-07/msg00006.html\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected libreoffice packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-base-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-base-drivers-mysql\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-base-drivers-mysql-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-base-drivers-postgresql\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-base-drivers-postgresql-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-base-extensions\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-branding-upstream\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-calc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-calc-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-calc-extensions\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-draw\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-draw-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-draw-extensions\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-filters-optional\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-gnome\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-gnome-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-ast\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-bg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-ca\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-cs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-da\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-de\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-el\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-en-GB\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-en-US\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-en-ZA\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-es\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-et\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-eu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-fi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-fr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-gl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-gu-IN\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-hi-IN\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-hu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-it\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-ja\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-km\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-ko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-mk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-nb\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-nl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-pl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-pt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-pt-BR\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-ru\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-sk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-sl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-sv\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-tr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-vi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-zh-CN\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-help-zh-TW\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-icon-theme-crystal\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-icon-theme-galaxy\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-icon-theme-hicontrast\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-icon-theme-oxygen\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-icon-theme-tango\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-icon-themes-prebuilt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-impress\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-impress-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-impress-extensions\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-impress-extensions-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-kde\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-kde-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-kde4\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-kde4-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-af\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-am\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-ar\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-as\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-ast\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-be-BY\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-bg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-br\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-ca\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-cs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-cy\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-da\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-de\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-el\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-en-GB\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-en-ZA\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-eo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-es\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-et\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-eu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-fi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-fr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-ga\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-gd\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-gl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-gu-IN\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-he\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-hi-IN\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-hr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-hu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-id\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-is\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-it\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-ja\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-ka\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-km\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-kn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-ko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-lt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-mk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-ml\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-mr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-nb\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-nl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-nn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-nr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-om\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-or\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-pa-IN\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-pl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-prebuilt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-pt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-pt-BR\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-ro\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-ru\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-rw\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-sh\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-sk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-sl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-sr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-ss\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-st\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-sv\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-ta\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-te\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-tg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-th\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-tr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-ts\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-ug\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-uk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-ve\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-vi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-xh\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-zh-CN\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-zh-TW\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-l10n-zu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-mailmerge\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-math\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-math-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-officebean\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-officebean-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-pyuno\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-pyuno-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-sdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-sdk-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-writer\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-writer-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libreoffice-writer-extensions\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:opensuse:13.1\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2014/06/23\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2014/07/02\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2014-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release =~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"openSUSE\");\nif (release !~ \"^(SUSE13\\.1)$\") audit(AUDIT_OS_RELEASE_NOT, \"openSUSE\", \"13.1\", release);\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\nourarch = get_kb_item(\"Host/cpu\");\nif (!ourarch) audit(AUDIT_UNKNOWN_ARCH);\nif (ourarch !~ \"^(i586|i686|x86_64)$\") audit(AUDIT_ARCH_NOT, \"i586 / i686 / x86_64\", ourarch);\n\nflag = 0;\n\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-base-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-base-debuginfo-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-base-drivers-mysql-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-base-drivers-mysql-debuginfo-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-base-drivers-postgresql-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-base-drivers-postgresql-debuginfo-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-base-extensions-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-branding-upstream-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-calc-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-calc-debuginfo-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-calc-extensions-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-debuginfo-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-debugsource-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-draw-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-draw-debuginfo-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-draw-extensions-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-filters-optional-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-gnome-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-gnome-debuginfo-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-ast-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-bg-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-ca-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-cs-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-da-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-de-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-el-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-en-GB-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-en-US-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-en-ZA-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-es-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-et-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-eu-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-fi-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-fr-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-gl-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-gu-IN-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-hi-IN-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-hu-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-it-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-ja-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-km-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-ko-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-mk-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-nb-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-nl-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-pl-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-pt-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-pt-BR-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-ru-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-sk-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-sl-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-sv-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-tr-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-vi-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-zh-CN-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-help-zh-TW-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-icon-theme-crystal-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-icon-theme-galaxy-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-icon-theme-hicontrast-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-icon-theme-oxygen-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-icon-theme-tango-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-icon-themes-prebuilt-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-impress-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-impress-debuginfo-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-impress-extensions-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-impress-extensions-debuginfo-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-kde-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-kde-debuginfo-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-kde4-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-kde4-debuginfo-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-af-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-am-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-ar-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-as-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-ast-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-be-BY-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-bg-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-br-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-ca-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-cs-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-cy-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-da-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-de-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-el-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-en-GB-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-en-ZA-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-eo-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-es-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-et-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-eu-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-fi-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-fr-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-ga-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-gd-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-gl-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-gu-IN-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-he-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-hi-IN-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-hr-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-hu-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-id-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-is-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-it-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-ja-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-ka-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-km-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-kn-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-ko-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-lt-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-mk-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-ml-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-mr-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-nb-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-nl-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-nn-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-nr-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-om-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-or-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-pa-IN-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-pl-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-prebuilt-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-pt-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-pt-BR-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-ro-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-ru-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-rw-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-sh-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-sk-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-sl-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-sr-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-ss-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-st-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-sv-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-ta-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-te-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-tg-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-th-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-tr-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-ts-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-ug-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-uk-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-ve-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-vi-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-xh-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-zh-CN-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-zh-TW-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-l10n-zu-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-mailmerge-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-math-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-math-debuginfo-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-officebean-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-officebean-debuginfo-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-pyuno-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-pyuno-debuginfo-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-sdk-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-sdk-debuginfo-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-writer-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-writer-debuginfo-4.1.6.2-21.1\") ) flag++;\nif ( rpm_check(release:\"SUSE13.1\", reference:\"libreoffice-writer-extensions-4.1.6.2-21.1\") ) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"libreoffice\");\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-01-12T10:12:57", "description": "This update fixes CVE-2014-0247 which allowed for unconditional\nexecution of VBA macros when opening certain documents.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 13, "published": "2014-07-03T00:00:00", "title": "Fedora 19 : libreoffice-4.1.6.2-7.fc19 (2014-7679)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2014-0247"], "modified": "2014-07-03T00:00:00", "cpe": ["cpe:/o:fedoraproject:fedora:19", "p-cpe:/a:fedoraproject:fedora:libreoffice"], "id": "FEDORA_2014-7679.NASL", "href": "https://www.tenable.com/plugins/nessus/76350", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory 2014-7679.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(76350);\n script_version(\"1.6\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_cve_id(\"CVE-2014-0247\");\n script_bugtraq_id(68151);\n script_xref(name:\"FEDORA\", value:\"2014-7679\");\n\n script_name(english:\"Fedora 19 : libreoffice-4.1.6.2-7.fc19 (2014-7679)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"This update fixes CVE-2014-0247 which allowed for unconditional\nexecution of VBA macros when opening certain documents.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=1111083\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2014-July/135020.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?614469d9\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected libreoffice package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:ND/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:libreoffice\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:19\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2014/06/24\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2014/07/03\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2014-2021 Tenable Network Security, Inc.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = eregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^19([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 19.x\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"FC19\", reference:\"libreoffice-4.1.6.2-7.fc19\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"libreoffice\");\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-01-17T12:49:49", "description": "From Red Hat Security Advisory 2015:0377 :\n\nUpdated libreoffice packages that fix three security issues, several\nbugs, and add various enhancements are now available for Red Hat\nEnterprise Linux 7.\n\nRed Hat Product Security has rated this update as having Moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.\n\nLibreOffice is an open source, community-developed office productivity\nsuite. It includes key desktop applications, such as a word processor,\na spreadsheet, a presentation manager, a formula editor, and a drawing\nprogram. LibreOffice replaces OpenOffice and provides a similar but\nenhanced and extended office suite.\n\nIt was found that LibreOffice documents executed macros\nunconditionally, without user approval, when these documents were\nopened using LibreOffice. An attacker could use this flaw to execute\narbitrary code as the user running LibreOffice by embedding malicious\nVBA scripts in the document as macros. (CVE-2014-0247)\n\nA flaw was found in the OLE (Object Linking and Embedding) generation\nin LibreOffice. An attacker could use this flaw to embed malicious OLE\ncode in a LibreOffice document, allowing for arbitrary code execution.\n(CVE-2014-3575)\n\nA use-after-free flaw was found in the 'Remote Control' capabilities\nof the LibreOffice Impress application. An attacker could use this\nflaw to remotely execute code with the permissions of the user running\nLibreOffice Impress. (CVE-2014-3693)\n\nThe libreoffice packages have been upgraded to upstream version\n4.2.6.3, which provides a number of bug fixes and enhancements over\nthe previous version. Among others :\n\n* Improved OpenXML interoperability.\n\n* Additional statistic functions in Calc (for interoperability with\nExcel and Excel's Add-in 'Analysis ToolPak').\n\n* Various performance improvements in Calc.\n\n* Apple Keynote and Abiword import.\n\n* Improved MathML export.\n\n* New Start screen with thumbnails of recently opened documents.\n\n* Visual clue in Slide Sorter when a slide has a transition or an\nanimation.\n\n* Improvements for trend lines in charts.\n\n* Support for BCP-47 language tags. (BZ#1119709)\n\nAll libreoffice users are advised to upgrade to these updated\npackages, which correct these issues and add these enhancements.", "edition": 24, "published": "2015-03-13T00:00:00", "title": "Oracle Linux 7 : libreoffice (ELSA-2015-0377)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2014-3575", "CVE-2014-3693", "CVE-2014-0247"], "modified": "2015-03-13T00:00:00", "cpe": ["p-cpe:/a:oracle:linux:libreoffice-langpack-ru", "p-cpe:/a:oracle:linux:libreoffice-langpack-te", "p-cpe:/a:oracle:linux:libreoffice-langpack-ro", "p-cpe:/a:oracle:linux:libreoffice-langpack-or", "p-cpe:/a:oracle:linux:libcmis-tools", "p-cpe:/a:oracle:linux:libreoffice-draw", "p-cpe:/a:oracle:linux:libreoffice-langpack-it", "p-cpe:/a:oracle:linux:libreoffice-graphicfilter", "p-cpe:/a:oracle:linux:libreoffice-emailmerge", "p-cpe:/a:oracle:linux:liblangtag-devel", "p-cpe:/a:oracle:linux:libreoffice-langpack-tn", "p-cpe:/a:oracle:linux:libodfgen-doc", "p-cpe:/a:oracle:linux:libreoffice-langpack-sl", "p-cpe:/a:oracle:linux:libmwaw-devel", "p-cpe:/a:oracle:linux:libreoffice-langpack-et", "p-cpe:/a:oracle:linux:autocorr-fr", "p-cpe:/a:oracle:linux:mdds-devel", "p-cpe:/a:oracle:linux:libreoffice-langpack-hr", "p-cpe:/a:oracle:linux:libreoffice-langpack-kn", "p-cpe:/a:oracle:linux:libreoffice-langpack-ts", "p-cpe:/a:oracle:linux:libmwaw", "p-cpe:/a:oracle:linux:libreoffice-langpack-xh", "p-cpe:/a:oracle:linux:autocorr-nl", "p-cpe:/a:oracle:linux:autocorr-zh", "p-cpe:/a:oracle:linux:libetonyek-tools", "p-cpe:/a:oracle:linux:libreoffice-langpack-lv", "p-cpe:/a:oracle:linux:libreoffice-langpack-gl", "p-cpe:/a:oracle:linux:autocorr-da", "p-cpe:/a:oracle:linux:libfreehand", "p-cpe:/a:oracle:linux:libabw-devel", "p-cpe:/a:oracle:linux:libreoffice-postgresql", "p-cpe:/a:oracle:linux:libreoffice-impress", "p-cpe:/a:oracle:linux:autocorr-is", "p-cpe:/a:oracle:linux:libetonyek", "p-cpe:/a:oracle:linux:libmwaw-doc", "p-cpe:/a:oracle:linux:libreoffice-xsltfilter", "p-cpe:/a:oracle:linux:libreoffice-langpack-cy", "p-cpe:/a:oracle:linux:libreoffice-base", "p-cpe:/a:oracle:linux:libreoffice-langpack-kk", "p-cpe:/a:oracle:linux:libreoffice-langpack-fa", "p-cpe:/a:oracle:linux:libfreehand-tools", "p-cpe:/a:oracle:linux:libreoffice-langpack-th", "p-cpe:/a:oracle:linux:libreoffice-langpack-sk", "p-cpe:/a:oracle:linux:libreoffice-langpack-nl", "p-cpe:/a:oracle:linux:autocorr-cs", "p-cpe:/a:oracle:linux:libreoffice-langpack-af", "p-cpe:/a:oracle:linux:libreoffice-langpack-ko", "p-cpe:/a:oracle:linux:autocorr-de", "p-cpe:/a:oracle:linux:libreoffice-langpack-ta", "p-cpe:/a:oracle:linux:libreoffice-sdk", "p-cpe:/a:oracle:linux:libreoffice-sdk-doc", "p-cpe:/a:oracle:linux:libreoffice-librelogo", "p-cpe:/a:oracle:linux:libreoffice-gdb-debug-support", "p-cpe:/a:oracle:linux:autocorr-sv", "p-cpe:/a:oracle:linux:libreoffice-langpack-br", "p-cpe:/a:oracle:linux:libcmis-devel", "p-cpe:/a:oracle:linux:autocorr-ru", "p-cpe:/a:oracle:linux:libreoffice-ogltrans", "p-cpe:/a:oracle:linux:libreoffice-langpack-st", "p-cpe:/a:oracle:linux:libreoffice-langpack-da", "p-cpe:/a:oracle:linux:libreoffice-langpack-en", "p-cpe:/a:oracle:linux:autocorr-lb", "p-cpe:/a:oracle:linux:autocorr-sr", "p-cpe:/a:oracle:linux:libreoffice-langpack-sr", "p-cpe:/a:oracle:linux:autocorr-ro", "p-cpe:/a:oracle:linux:libreoffice-langpack-nso", "p-cpe:/a:oracle:linux:libfreehand-devel", "p-cpe:/a:oracle:linux:libreoffice-langpack-zh-Hans", "p-cpe:/a:oracle:linux:autocorr-ja", "p-cpe:/a:oracle:linux:libreoffice-langpack-el", "p-cpe:/a:oracle:linux:libreoffice-langpack-ca", "p-cpe:/a:oracle:linux:libreoffice-wiki-publisher", "p-cpe:/a:oracle:linux:libreoffice-langpack-dz", "p-cpe:/a:oracle:linux:autocorr-hr", "p-cpe:/a:oracle:linux:libreoffice-langpack-nn", "p-cpe:/a:oracle:linux:libabw", "p-cpe:/a:oracle:linux:libodfgen-devel", "p-cpe:/a:oracle:linux:libreoffice-langpack-zh-Hant", "p-cpe:/a:oracle:linux:autocorr-fa", "p-cpe:/a:oracle:linux:libreoffice-filters", "p-cpe:/a:oracle:linux:libreoffice-langpack-de", "p-cpe:/a:oracle:linux:libreoffice-opensymbol-fonts", "p-cpe:/a:oracle:linux:libreoffice-langpack-pt-PT", "p-cpe:/a:oracle:linux:libfreehand-doc", "p-cpe:/a:oracle:linux:libreoffice-langpack-eu", "p-cpe:/a:oracle:linux:libreoffice-pyuno", "p-cpe:/a:oracle:linux:libcmis", "p-cpe:/a:oracle:linux:libreoffice-langpack-nr", "p-cpe:/a:oracle:linux:libreoffice-writer", "p-cpe:/a:oracle:linux:autocorr-en", "p-cpe:/a:oracle:linux:autocorr-ko", "p-cpe:/a:oracle:linux:libreoffice-langpack-mai", "p-cpe:/a:oracle:linux:libreoffice-langpack-he", "p-cpe:/a:oracle:linux:libreoffice-langpack-pt-BR", "p-cpe:/a:oracle:linux:libabw-doc", "p-cpe:/a:oracle:linux:autocorr-af", "p-cpe:/a:oracle:linux:libreoffice-langpack-hu", "p-cpe:/a:oracle:linux:libreoffice-langpack-bg", "p-cpe:/a:oracle:linux:libetonyek-devel", "p-cpe:/a:oracle:linux:libreoffice-langpack-sv", "p-cpe:/a:oracle:linux:libreoffice-langpack-ss", "p-cpe:/a:oracle:linux:libreoffice-calc", "p-cpe:/a:oracle:linux:libreoffice-rhino", "p-cpe:/a:oracle:linux:autocorr-it", "p-cpe:/a:oracle:linux:libetonyek-doc", "p-cpe:/a:oracle:linux:autocorr-hu", "p-cpe:/a:oracle:linux:libreoffice-langpack-ar", "p-cpe:/a:oracle:linux:libreoffice-langpack-ve", "p-cpe:/a:oracle:linux:autocorr-pt", "p-cpe:/a:oracle:linux:liblangtag-gobject", "p-cpe:/a:oracle:linux:autocorr-pl", "p-cpe:/a:oracle:linux:autocorr-vi", "p-cpe:/a:oracle:linux:autocorr-fi", "p-cpe:/a:oracle:linux:libodfgen", "p-cpe:/a:oracle:linux:autocorr-tr", "p-cpe:/a:oracle:linux:libreoffice-ure", "p-cpe:/a:oracle:linux:libreoffice-headless", "p-cpe:/a:oracle:linux:libreoffice-core", "p-cpe:/a:oracle:linux:libabw-tools", "p-cpe:/a:oracle:linux:libreoffice-langpack-si", "p-cpe:/a:oracle:linux:libreoffice-nlpsolver", "p-cpe:/a:oracle:linux:libreoffice-langpack-bn", "cpe:/o:oracle:linux:7", "p-cpe:/a:oracle:linux:libreoffice-langpack-ml", "p-cpe:/a:oracle:linux:libreoffice-langpack-pa", "p-cpe:/a:oracle:linux:libreoffice-langpack-zu", "p-cpe:/a:oracle:linux:autocorr-sk", "p-cpe:/a:oracle:linux:autocorr-sl", "p-cpe:/a:oracle:linux:autocorr-ca", "p-cpe:/a:oracle:linux:libreoffice-langpack-tr", "p-cpe:/a:oracle:linux:liblangtag-doc", "p-cpe:/a:oracle:linux:liblangtag", "p-cpe:/a:oracle:linux:libreoffice-langpack-hi", "p-cpe:/a:oracle:linux:libreoffice-langpack-mr", "p-cpe:/a:oracle:linux:libreoffice-langpack-ja", "p-cpe:/a:oracle:linux:libreoffice-langpack-lt", "p-cpe:/a:oracle:linux:libreoffice-glade", "p-cpe:/a:oracle:linux:libreoffice-langpack-nb", "p-cpe:/a:oracle:linux:libreoffice-langpack-gu", "p-cpe:/a:oracle:linux:libreoffice-langpack-uk", "p-cpe:/a:oracle:linux:libreoffice-langpack-cs", "p-cpe:/a:oracle:linux:libreoffice", "p-cpe:/a:oracle:linux:autocorr-lt", "p-cpe:/a:oracle:linux:autocorr-es", "p-cpe:/a:oracle:linux:libreoffice-langpack-es", "p-cpe:/a:oracle:linux:autocorr-ga", "p-cpe:/a:oracle:linux:libmwaw-tools", "p-cpe:/a:oracle:linux:libreoffice-bsh", "p-cpe:/a:oracle:linux:libreoffice-langpack-ga", "p-cpe:/a:oracle:linux:libreoffice-langpack-fi", "p-cpe:/a:oracle:linux:autocorr-bg", "p-cpe:/a:oracle:linux:libreoffice-langpack-as", "p-cpe:/a:oracle:linux:autocorr-mn", "p-cpe:/a:oracle:linux:libreoffice-pdfimport", "p-cpe:/a:oracle:linux:libreoffice-langpack-fr", "p-cpe:/a:oracle:linux:libreoffice-langpack-pl", "p-cpe:/a:oracle:linux:libreoffice-math"], "id": "ORACLELINUX_ELSA-2015-0377.NASL", "href": "https://www.tenable.com/plugins/nessus/81804", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Red Hat Security Advisory RHSA-2015:0377 and \n# Oracle Linux Security Advisory ELSA-2015-0377 respectively.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(81804);\n script_version(\"1.7\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n\n script_cve_id(\"CVE-2014-0247\", \"CVE-2014-3575\", \"CVE-2014-3693\");\n script_bugtraq_id(71351);\n script_xref(name:\"RHSA\", value:\"2015:0377\");\n\n script_name(english:\"Oracle Linux 7 : libreoffice (ELSA-2015-0377)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Oracle Linux host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"From Red Hat Security Advisory 2015:0377 :\n\nUpdated libreoffice packages that fix three security issues, several\nbugs, and add various enhancements are now available for Red Hat\nEnterprise Linux 7.\n\nRed Hat Product Security has rated this update as having Moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.\n\nLibreOffice is an open source, community-developed office productivity\nsuite. It includes key desktop applications, such as a word processor,\na spreadsheet, a presentation manager, a formula editor, and a drawing\nprogram. LibreOffice replaces OpenOffice and provides a similar but\nenhanced and extended office suite.\n\nIt was found that LibreOffice documents executed macros\nunconditionally, without user approval, when these documents were\nopened using LibreOffice. An attacker could use this flaw to execute\narbitrary code as the user running LibreOffice by embedding malicious\nVBA scripts in the document as macros. (CVE-2014-0247)\n\nA flaw was found in the OLE (Object Linking and Embedding) generation\nin LibreOffice. An attacker could use this flaw to embed malicious OLE\ncode in a LibreOffice document, allowing for arbitrary code execution.\n(CVE-2014-3575)\n\nA use-after-free flaw was found in the 'Remote Control' capabilities\nof the LibreOffice Impress application. An attacker could use this\nflaw to remotely execute code with the permissions of the user running\nLibreOffice Impress. (CVE-2014-3693)\n\nThe libreoffice packages have been upgraded to upstream version\n4.2.6.3, which provides a number of bug fixes and enhancements over\nthe previous version. Among others :\n\n* Improved OpenXML interoperability.\n\n* Additional statistic functions in Calc (for interoperability with\nExcel and Excel's Add-in 'Analysis ToolPak').\n\n* Various performance improvements in Calc.\n\n* Apple Keynote and Abiword import.\n\n* Improved MathML export.\n\n* New Start screen with thumbnails of recently opened documents.\n\n* Visual clue in Slide Sorter when a slide has a transition or an\nanimation.\n\n* Improvements for trend lines in charts.\n\n* Support for BCP-47 language tags. (BZ#1119709)\n\nAll libreoffice users are advised to upgrade to these updated\npackages, which correct these issues and add these enhancements.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://oss.oracle.com/pipermail/el-errata/2015-March/004887.html\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected libreoffice packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:ND/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-af\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-bg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-ca\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-cs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-da\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-de\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-en\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-es\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-fa\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-fi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-fr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-ga\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-hr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-hu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-is\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-it\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-ja\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-ko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-lb\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-lt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-mn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-nl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-pl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-pt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-ro\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-ru\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-sk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-sl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-sr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-sv\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-tr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-vi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:autocorr-zh\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libabw\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libabw-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libabw-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libabw-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libcmis\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libcmis-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libcmis-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libetonyek\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libetonyek-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libetonyek-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libetonyek-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libfreehand\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libfreehand-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libfreehand-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libfreehand-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:liblangtag\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:liblangtag-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:liblangtag-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:liblangtag-gobject\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libmwaw\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libmwaw-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libmwaw-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libmwaw-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libodfgen\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libodfgen-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libodfgen-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-bsh\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-calc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-core\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-draw\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-emailmerge\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-filters\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-gdb-debug-support\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-glade\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-graphicfilter\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-headless\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-impress\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-af\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-ar\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-as\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-bg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-bn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-br\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-ca\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-cs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-cy\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-da\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-de\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-dz\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-el\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-en\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-es\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-et\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-eu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-fa\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-fi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-fr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-ga\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-gl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-gu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-he\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-hi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-hr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-hu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-it\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-ja\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-kk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-kn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-ko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-lt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-lv\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-mai\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-ml\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-mr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-nb\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-nl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-nn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-nr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-nso\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-or\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-pa\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-pl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-pt-BR\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-pt-PT\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-ro\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-ru\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-si\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-sk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-sl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-sr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-ss\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-st\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-sv\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-ta\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-te\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-th\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-tn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-tr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-ts\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-uk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-ve\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-xh\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-zh-Hans\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-zh-Hant\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-langpack-zu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-librelogo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-math\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-nlpsolver\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-ogltrans\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-opensymbol-fonts\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-pdfimport\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-postgresql\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-pyuno\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-rhino\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-sdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-sdk-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-ure\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-wiki-publisher\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-writer\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:libreoffice-xsltfilter\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:mdds-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:linux:7\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2014/07/03\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/03/12\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/03/13\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Oracle Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/OracleLinux\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/OracleLinux\")) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || !pregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux)\", string:release)) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nos_ver = pregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux) .*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Oracle Linux\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^7([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Oracle Linux 7\", \"Oracle Linux \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Oracle Linux\", cpu);\nif (\"x86_64\" >!< cpu) audit(AUDIT_ARCH_NOT, \"x86_64\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-af-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-bg-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-ca-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-cs-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-da-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-de-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-en-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-es-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-fa-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-fi-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-fr-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-ga-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-hr-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-hu-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-is-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-it-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-ja-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-ko-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-lb-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-lt-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-mn-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-nl-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-pl-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-pt-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-ro-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-ru-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-sk-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-sl-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-sr-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-sv-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-tr-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-vi-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"autocorr-zh-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libabw-0.0.2-1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libabw-devel-0.0.2-1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libabw-doc-0.0.2-1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libabw-tools-0.0.2-1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libcmis-0.4.1-5.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libcmis-devel-0.4.1-5.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libcmis-tools-0.4.1-5.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libetonyek-0.0.4-2.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libetonyek-devel-0.0.4-2.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libetonyek-doc-0.0.4-2.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libetonyek-tools-0.0.4-2.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libfreehand-0.0.0-3.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libfreehand-devel-0.0.0-3.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libfreehand-doc-0.0.0-3.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libfreehand-tools-0.0.0-3.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"liblangtag-0.5.4-8.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"liblangtag-devel-0.5.4-8.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"liblangtag-doc-0.5.4-8.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"liblangtag-gobject-0.5.4-8.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libmwaw-0.2.0-4.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libmwaw-devel-0.2.0-4.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libmwaw-doc-0.2.0-4.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libmwaw-tools-0.2.0-4.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libodfgen-0.0.4-1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libodfgen-devel-0.0.4-1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libodfgen-doc-0.0.4-1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-base-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-bsh-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-calc-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-core-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-draw-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-emailmerge-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-filters-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-gdb-debug-support-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-glade-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-graphicfilter-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-headless-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-impress-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-af-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ar-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-as-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-bg-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-bn-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-br-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ca-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-cs-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-cy-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-da-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-de-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-dz-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-el-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-en-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-es-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-et-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-eu-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-fa-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-fi-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-fr-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ga-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-gl-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-gu-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-he-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-hi-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-hr-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-hu-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-it-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ja-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-kk-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-kn-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ko-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-lt-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-lv-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-mai-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ml-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-mr-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-nb-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-nl-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-nn-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-nr-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-nso-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-or-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-pa-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-pl-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-pt-BR-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-pt-PT-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ro-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ru-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-si-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-sk-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-sl-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-sr-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ss-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-st-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-sv-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ta-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-te-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-th-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-tn-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-tr-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ts-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-uk-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ve-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-xh-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-zh-Hans-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-zh-Hant-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-zu-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-librelogo-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-math-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-nlpsolver-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-ogltrans-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-opensymbol-fonts-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-pdfimport-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-postgresql-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-pyuno-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-rhino-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-sdk-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-sdk-doc-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-ure-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-wiki-publisher-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-writer-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"libreoffice-xsltfilter-4.2.6.3-5.0.1.el7\")) flag++;\nif (rpm_check(release:\"EL7\", cpu:\"x86_64\", reference:\"mdds-devel-0.10.3-1.el7\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc\");\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-04-01T05:34:25", "description": "Updated libreoffice packages that fix three security issues, several\nbugs, and add various enhancements are now available for Red Hat\nEnterprise Linux 7.\n\nRed Hat Product Security has rated this update as having Moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.\n\nLibreOffice is an open source, community-developed office productivity\nsuite. It includes key desktop applications, such as a word processor,\na spreadsheet, a presentation manager, a formula editor, and a drawing\nprogram. LibreOffice replaces OpenOffice and provides a similar but\nenhanced and extended office suite.\n\nIt was found that LibreOffice documents executed macros\nunconditionally, without user approval, when these documents were\nopened using LibreOffice. An attacker could use this flaw to execute\narbitrary code as the user running LibreOffice by embedding malicious\nVBA scripts in the document as macros. (CVE-2014-0247)\n\nA flaw was found in the OLE (Object Linking and Embedding) generation\nin LibreOffice. An attacker could use this flaw to embed malicious OLE\ncode in a LibreOffice document, allowing for arbitrary code execution.\n(CVE-2014-3575)\n\nA use-after-free flaw was found in the 'Remote Control' capabilities\nof the LibreOffice Impress application. An attacker could use this\nflaw to remotely execute code with the permissions of the user running\nLibreOffice Impress. (CVE-2014-3693)\n\nThe libreoffice packages have been upgraded to upstream version\n4.2.6.3, which provides a number of bug fixes and enhancements over\nthe previous version. Among others :\n\n* Improved OpenXML interoperability.\n\n* Additional statistic functions in Calc (for interoperability with\nExcel and Excel's Add-in 'Analysis ToolPak').\n\n* Various performance improvements in Calc.\n\n* Apple Keynote and Abiword import.\n\n* Improved MathML export.\n\n* New Start screen with thumbnails of recently opened documents.\n\n* Visual clue in Slide Sorter when a slide has a transition or an\nanimation.\n\n* Improvements for trend lines in charts.\n\n* Support for BCP-47 language tags. (BZ#1119709)\n\nAll libreoffice users are advised to upgrade to these updated\npackages, which correct these issues and add these enhancements.", "edition": 30, "published": "2015-03-05T00:00:00", "title": "RHEL 7 : libreoffice (RHSA-2015:0377)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2014-3575", "CVE-2014-3693", "CVE-2014-0247"], "modified": "2021-04-02T00:00:00", "cpe": ["p-cpe:/a:redhat:enterprise_linux:libetonyek-tools", "p-cpe:/a:redhat:enterprise_linux:autocorr-ca", "p-cpe:/a:redhat:enterprise_linux:autocorr-hr", "p-cpe:/a:redhat:enterprise_linux:autocorr-it", "p-cpe:/a:redhat:enterprise_linux:autocorr-ja", "p-cpe:/a:redhat:enterprise_linux:autocorr-ga", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ta", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-gl", "p-cpe:/a:redhat:enterprise_linux:liblangtag-debuginfo", "p-cpe:/a:redhat:enterprise_linux:libreoffice-ure", "p-cpe:/a:redhat:enterprise_linux:autocorr-sr", "p-cpe:/a:redhat:enterprise_linux:autocorr-sk", "p-cpe:/a:redhat:enterprise_linux:libodfgen-devel", "p-cpe:/a:redhat:enterprise_linux:libreoffice-sdk", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-de", "p-cpe:/a:redhat:enterprise_linux:autocorr-is", "p-cpe:/a:redhat:enterprise_linux:libmwaw-devel", "p-cpe:/a:redhat:enterprise_linux:libcmis", "p-cpe:/a:redhat:enterprise_linux:libetonyek", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ko", "p-cpe:/a:redhat:enterprise_linux:libcmis-tools", "p-cpe:/a:redhat:enterprise_linux:libreoffice-gdb-debug-support", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-eu", "p-cpe:/a:redhat:enterprise_linux:autocorr-zh", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-bn", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-mr", "p-cpe:/a:redhat:enterprise_linux:autocorr-lb", "p-cpe:/a:redhat:enterprise_linux:autocorr-ro", "p-cpe:/a:redhat:enterprise_linux:libabw", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-pa", "p-cpe:/a:redhat:enterprise_linux:libmwaw", "p-cpe:/a:redhat:enterprise_linux:liblangtag-gobject", "p-cpe:/a:redhat:enterprise_linux:libreoffice-postgresql", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-cy", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ru", "p-cpe:/a:redhat:enterprise_linux:libodfgen-doc", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-lv", "p-cpe:/a:redhat:enterprise_linux:libodfgen-debuginfo", "p-cpe:/a:redhat:enterprise_linux:libfreehand-doc", "cpe:/o:redhat:enterprise_linux:7.4", "p-cpe:/a:redhat:enterprise_linux:libfreehand-debuginfo", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-pl", "p-cpe:/a:redhat:enterprise_linux:autocorr-de", "p-cpe:/a:redhat:enterprise_linux:libabw-devel", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-nb", "p-cpe:/a:redhat:enterprise_linux:libreoffice-impress", "p-cpe:/a:redhat:enterprise_linux:libmwaw-debuginfo", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ml", "p-cpe:/a:redhat:enterprise_linux:libreoffice-calc", "p-cpe:/a:redhat:enterprise_linux:libfreehand-tools", "p-cpe:/a:redhat:enterprise_linux:autocorr-sl", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-te", "p-cpe:/a:redhat:enterprise_linux:autocorr-sv", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ca", "p-cpe:/a:redhat:enterprise_linux:libreoffice-wiki-publisher", "p-cpe:/a:redhat:enterprise_linux:liblangtag-devel", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ss", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ts", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-nl", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-sk", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-cs", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-he", "p-cpe:/a:redhat:enterprise_linux:libreoffice", "p-cpe:/a:redhat:enterprise_linux:libreoffice-graphicfilter", "p-cpe:/a:redhat:enterprise_linux:libreoffice-base", "p-cpe:/a:redhat:enterprise_linux:liblangtag-doc", "cpe:/o:redhat:enterprise_linux:7.7", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-sv", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-kk", "p-cpe:/a:redhat:enterprise_linux:autocorr-pl", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-kn", "p-cpe:/a:redhat:enterprise_linux:libreoffice-pdfimport", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-lt", "p-cpe:/a:redhat:enterprise_linux:mdds-devel", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-st", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-bg", "p-cpe:/a:redhat:enterprise_linux:libreoffice-sdk-doc", "p-cpe:/a:redhat:enterprise_linux:libetonyek-doc", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-pt-PT", "cpe:/o:redhat:enterprise_linux:7.5", "p-cpe:/a:redhat:enterprise_linux:libfreehand", "p-cpe:/a:redhat:enterprise_linux:libreoffice-glade", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-zu", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-tr", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-af", "p-cpe:/a:redhat:enterprise_linux:autocorr-lt", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-nn", "cpe:/o:redhat:enterprise_linux:7", "p-cpe:/a:redhat:enterprise_linux:autocorr-en", "p-cpe:/a:redhat:enterprise_linux:autocorr-hu", "p-cpe:/a:redhat:enterprise_linux:autocorr-fa", "p-cpe:/a:redhat:enterprise_linux:libabw-tools", "p-cpe:/a:redhat:enterprise_linux:libcmis-devel", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-et", "p-cpe:/a:redhat:enterprise_linux:libreoffice-debuginfo", "p-cpe:/a:redhat:enterprise_linux:libreoffice-math", "p-cpe:/a:redhat:enterprise_linux:libodfgen", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-zh-Hans", "p-cpe:/a:redhat:enterprise_linux:libmwaw-doc", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-zh-Hant", "p-cpe:/a:redhat:enterprise_linux:libreoffice-xsltfilter", "cpe:/o:redhat:enterprise_linux:7.3", "p-cpe:/a:redhat:enterprise_linux:libabw-doc", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-fr", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-es", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-or", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-hi", "p-cpe:/a:redhat:enterprise_linux:autocorr-fr", "p-cpe:/a:redhat:enterprise_linux:libreoffice-filters", "p-cpe:/a:redhat:enterprise_linux:libreoffice-rhino", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-hu", "p-cpe:/a:redhat:enterprise_linux:autocorr-vi", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-gu", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-mai", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-it", "p-cpe:/a:redhat:enterprise_linux:libmwaw-tools", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-nso", "p-cpe:/a:redhat:enterprise_linux:autocorr-fi", "p-cpe:/a:redhat:enterprise_linux:libreoffice-pyuno", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ro", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-sl", "p-cpe:/a:redhat:enterprise_linux:autocorr-da", "p-cpe:/a:redhat:enterprise_linux:autocorr-af", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-tn", "p-cpe:/a:redhat:enterprise_linux:autocorr-ru", "p-cpe:/a:redhat:enterprise_linux:autocorr-mn", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-sr", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ja", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ve", "p-cpe:/a:redhat:enterprise_linux:libreoffice-headless", "cpe:/o:redhat:enterprise_linux:7.6", "p-cpe:/a:redhat:enterprise_linux:autocorr-cs", "p-cpe:/a:redhat:enterprise_linux:libreoffice-nlpsolver", "p-cpe:/a:redhat:enterprise_linux:autocorr-pt", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-da", "p-cpe:/a:redhat:enterprise_linux:autocorr-nl", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-hr", "p-cpe:/a:redhat:enterprise_linux:autocorr-bg", "p-cpe:/a:redhat:enterprise_linux:libreoffice-ogltrans", "p-cpe:/a:redhat:enterprise_linux:libreoffice-librelogo", "p-cpe:/a:redhat:enterprise_linux:libreoffice-core", "p-cpe:/a:redhat:enterprise_linux:libetonyek-debuginfo", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-dz", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ga", "p-cpe:/a:redhat:enterprise_linux:libreoffice-opensymbol-fonts", "p-cpe:/a:redhat:enterprise_linux:libfreehand-devel", "p-cpe:/a:redhat:enterprise_linux:liblangtag", "p-cpe:/a:redhat:enterprise_linux:libetonyek-devel", "p-cpe:/a:redhat:enterprise_linux:libreoffice-bsh", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-as", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-br", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-uk", "p-cpe:/a:redhat:enterprise_linux:autocorr-es", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-fi", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-th", "p-cpe:/a:redhat:enterprise_linux:libcmis-debuginfo", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-en", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-nr", "p-cpe:/a:redhat:enterprise_linux:libreoffice-draw", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ar", "p-cpe:/a:redhat:enterprise_linux:autocorr-ko", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-pt-BR", "p-cpe:/a:redhat:enterprise_linux:autocorr-tr", "p-cpe:/a:redhat:enterprise_linux:libreoffice-emailmerge", "p-cpe:/a:redhat:enterprise_linux:libreoffice-writer", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-el", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-si", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-fa", "p-cpe:/a:redhat:enterprise_linux:libabw-debuginfo", "p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-xh"], "id": "REDHAT-RHSA-2015-0377.NASL", "href": "https://www.tenable.com/plugins/nessus/81633", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2015:0377. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(81633);\n script_version(\"1.12\");\n script_cvs_date(\"Date: 2019/10/24 15:35:39\");\n\n script_cve_id(\"CVE-2014-0247\", \"CVE-2014-3575\", \"CVE-2014-3693\");\n script_xref(name:\"RHSA\", value:\"2015:0377\");\n\n script_name(english:\"RHEL 7 : libreoffice (RHSA-2015:0377)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated libreoffice packages that fix three security issues, several\nbugs, and add various enhancements are now available for Red Hat\nEnterprise Linux 7.\n\nRed Hat Product Security has rated this update as having Moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.\n\nLibreOffice is an open source, community-developed office productivity\nsuite. It includes key desktop applications, such as a word processor,\na spreadsheet, a presentation manager, a formula editor, and a drawing\nprogram. LibreOffice replaces OpenOffice and provides a similar but\nenhanced and extended office suite.\n\nIt was found that LibreOffice documents executed macros\nunconditionally, without user approval, when these documents were\nopened using LibreOffice. An attacker could use this flaw to execute\narbitrary code as the user running LibreOffice by embedding malicious\nVBA scripts in the document as macros. (CVE-2014-0247)\n\nA flaw was found in the OLE (Object Linking and Embedding) generation\nin LibreOffice. An attacker could use this flaw to embed malicious OLE\ncode in a LibreOffice document, allowing for arbitrary code execution.\n(CVE-2014-3575)\n\nA use-after-free flaw was found in the 'Remote Control' capabilities\nof the LibreOffice Impress application. An attacker could use this\nflaw to remotely execute code with the permissions of the user running\nLibreOffice Impress. (CVE-2014-3693)\n\nThe libreoffice packages have been upgraded to upstream version\n4.2.6.3, which provides a number of bug fixes and enhancements over\nthe previous version. Among others :\n\n* Improved OpenXML interoperability.\n\n* Additional statistic functions in Calc (for interoperability with\nExcel and Excel's Add-in 'Analysis ToolPak').\n\n* Various performance improvements in Calc.\n\n* Apple Keynote and Abiword import.\n\n* Improved MathML export.\n\n* New Start screen with thumbnails of recently opened documents.\n\n* Visual clue in Slide Sorter when a slide has a transition or an\nanimation.\n\n* Improvements for trend lines in charts.\n\n* Support for BCP-47 language tags. (BZ#1119709)\n\nAll libreoffice users are advised to upgrade to these updated\npackages, which correct these issues and add these enhancements.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/errata/RHSA-2015:0377\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2014-0247\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2014-3575\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2014-3693\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-af\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-bg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-ca\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-cs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-da\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-de\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-en\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-es\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-fa\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-fi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-fr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-ga\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-hr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-hu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-is\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-it\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-ja\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-ko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-lb\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-lt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-mn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-nl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-pl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-pt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-ro\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-ru\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-sk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-sl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-sr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-sv\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-tr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-vi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:autocorr-zh\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libabw\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libabw-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libabw-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libabw-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libabw-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libcmis\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libcmis-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libcmis-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libcmis-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libetonyek\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libetonyek-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libetonyek-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libetonyek-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libetonyek-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libfreehand\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libfreehand-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libfreehand-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libfreehand-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libfreehand-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:liblangtag\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:liblangtag-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:liblangtag-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:liblangtag-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:liblangtag-gobject\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libmwaw\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libmwaw-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libmwaw-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libmwaw-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libmwaw-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libodfgen\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libodfgen-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libodfgen-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libodfgen-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-bsh\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-calc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-core\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-draw\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-emailmerge\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-filters\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-gdb-debug-support\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-glade\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-graphicfilter\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-headless\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-impress\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-af\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ar\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-as\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-bg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-bn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-br\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ca\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-cs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-cy\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-da\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-de\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-dz\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-el\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-en\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-es\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-et\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-eu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-fa\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-fi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-fr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ga\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-gl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-gu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-he\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-hi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-hr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-hu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-it\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ja\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-kk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-kn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-lt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-lv\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-mai\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ml\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-mr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-nb\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-nl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-nn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-nr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-nso\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-or\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-pa\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-pl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-pt-BR\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-pt-PT\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ro\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ru\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-si\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-sk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-sl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-sr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ss\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-st\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-sv\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ta\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-te\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-th\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-tn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-tr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ts\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-uk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-ve\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-xh\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-zh-Hans\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-zh-Hant\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-langpack-zu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-librelogo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-math\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-nlpsolver\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-ogltrans\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-opensymbol-fonts\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-pdfimport\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-postgresql\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-pyuno\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-rhino\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-sdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-sdk-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-ure\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-wiki-publisher\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-writer\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:libreoffice-xsltfilter\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:mdds-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.3\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.4\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.5\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.6\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.7\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2014/07/03\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/03/05\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/03/05\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = pregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^7([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 7.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2015:0377\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-af-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-bg-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-ca-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-cs-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-da-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-de-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-en-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-es-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-fa-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-fi-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-fr-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-ga-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-hr-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-hu-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-is-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-it-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-ja-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-ko-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-lb-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-lt-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-mn-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-nl-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-pl-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-pt-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-ro-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-ru-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-sk-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-sl-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-sr-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-sv-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-tr-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-vi-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"autocorr-zh-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"libabw-0.0.2-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libabw-0.0.2-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"libabw-debuginfo-0.0.2-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libabw-debuginfo-0.0.2-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"libabw-devel-0.0.2-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libabw-devel-0.0.2-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"libabw-doc-0.0.2-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libabw-tools-0.0.2-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"libcmis-0.4.1-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libcmis-0.4.1-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"libcmis-debuginfo-0.4.1-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libcmis-debuginfo-0.4.1-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"libcmis-devel-0.4.1-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libcmis-devel-0.4.1-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libcmis-tools-0.4.1-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"libetonyek-0.0.4-2.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libetonyek-0.0.4-2.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"libetonyek-debuginfo-0.0.4-2.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libetonyek-debuginfo-0.0.4-2.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"libetonyek-devel-0.0.4-2.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libetonyek-devel-0.0.4-2.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"libetonyek-doc-0.0.4-2.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libetonyek-tools-0.0.4-2.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"libfreehand-0.0.0-3.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libfreehand-0.0.0-3.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"libfreehand-debuginfo-0.0.0-3.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libfreehand-debuginfo-0.0.0-3.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"libfreehand-devel-0.0.0-3.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libfreehand-devel-0.0.0-3.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"libfreehand-doc-0.0.0-3.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libfreehand-tools-0.0.0-3.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"liblangtag-0.5.4-8.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"liblangtag-0.5.4-8.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"liblangtag-debuginfo-0.5.4-8.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"liblangtag-debuginfo-0.5.4-8.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"liblangtag-devel-0.5.4-8.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"liblangtag-devel-0.5.4-8.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"liblangtag-doc-0.5.4-8.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"liblangtag-gobject-0.5.4-8.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"liblangtag-gobject-0.5.4-8.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"libmwaw-0.2.0-4.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libmwaw-0.2.0-4.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"libmwaw-debuginfo-0.2.0-4.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libmwaw-debuginfo-0.2.0-4.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"libmwaw-devel-0.2.0-4.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libmwaw-devel-0.2.0-4.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"libmwaw-doc-0.2.0-4.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libmwaw-tools-0.2.0-4.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"libodfgen-0.0.4-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libodfgen-0.0.4-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"libodfgen-debuginfo-0.0.4-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libodfgen-debuginfo-0.0.4-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"i686\", reference:\"libodfgen-devel-0.0.4-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libodfgen-devel-0.0.4-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"libodfgen-doc-0.0.4-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-base-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-bsh-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-calc-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-core-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-debuginfo-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-draw-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-emailmerge-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-filters-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-gdb-debug-support-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-glade-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-graphicfilter-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-headless-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-impress-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-af-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ar-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-as-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-bg-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-bn-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-br-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ca-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-cs-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-cy-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-da-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-de-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-dz-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-el-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-en-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-es-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-et-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-eu-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-fa-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-fi-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-fr-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ga-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-gl-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-gu-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-he-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-hi-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-hr-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-hu-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-it-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ja-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-kk-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-kn-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ko-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-lt-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-lv-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-mai-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ml-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-mr-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-nb-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-nl-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-nn-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-nr-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-nso-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-or-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-pa-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-pl-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-pt-BR-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-pt-PT-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ro-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ru-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-si-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-sk-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-sl-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-sr-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ss-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-st-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-sv-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ta-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-te-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-th-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-tn-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-tr-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ts-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-uk-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ve-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-xh-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-zh-Hans-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-zh-Hant-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-zu-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-librelogo-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-math-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-nlpsolver-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-ogltrans-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"libreoffice-opensymbol-fonts-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-pdfimport-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-postgresql-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-pyuno-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-rhino-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-sdk-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-sdk-doc-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-ure-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-wiki-publisher-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-writer-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"libreoffice-xsltfilter-4.2.6.3-5.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"mdds-devel-0.10.3-1.el7\")) flag++;\n\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc\");\n }\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-01-06T09:30:02", "description": "Updated libreoffice packages that fix three security issues, several\nbugs, and add various enhancements are now available for Red Hat\nEnterprise Linux 7.\n\nRed Hat Product Security has rated this update as having Moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.\n\nLibreOffice is an open source, community-developed office productivity\nsuite. It includes key desktop applications, such as a word processor,\na spreadsheet, a presentation manager, a formula editor, and a drawing\nprogram. LibreOffice replaces OpenOffice and provides a similar but\nenhanced and extended office suite.\n\nIt was found that LibreOffice documents executed macros\nunconditionally, without user approval, when these documents were\nopened using LibreOffice. An attacker could use this flaw to execute\narbitrary code as the user running LibreOffice by embedding malicious\nVBA scripts in the document as macros. (CVE-2014-0247)\n\nA flaw was found in the OLE (Object Linking and Embedding) generation\nin LibreOffice. An attacker could use this flaw to embed malicious OLE\ncode in a LibreOffice document, allowing for arbitrary code execution.\n(CVE-2014-3575)\n\nA use-after-free flaw was found in the 'Remote Control' capabilities\nof the LibreOffice Impress application. An attacker could use this\nflaw to remotely execute code with the permissions of the user running\nLibreOffice Impress. (CVE-2014-3693)\n\nThe libreoffice packages have been upgraded to upstream version\n4.2.6.3, which provides a number of bug fixes and enhancements over\nthe previous version. Among others :\n\n* Improved OpenXML interoperability.\n\n* Additional statistic functions in Calc (for interoperability with\nExcel and Excel's Add-in 'Analysis ToolPak').\n\n* Various performance improvements in Calc.\n\n* Apple Keynote and Abiword import.\n\n* Improved MathML export.\n\n* New Start screen with thumbnails of recently opened documents.\n\n* Visual clue in Slide Sorter when a slide has a transition or an\nanimation.\n\n* Improvements for trend lines in charts.\n\n* Support for BCP-47 language tags. (BZ#1119709)\n\nAll libreoffice users are advised to upgrade to these updated\npackages, which correct these issues and add these enhancements.", "edition": 27, "published": "2015-03-18T00:00:00", "title": "CentOS 7 : libabw / libcmis / libetonyek / libfreehand / liblangtag / libmwaw / libodfgen / etc (CESA-2015:0377)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2014-3575", "CVE-2014-3693", "CVE-2014-0247"], "modified": "2015-03-18T00:00:00", "cpe": ["p-cpe:/a:centos:centos:autocorr-fi", "p-cpe:/a:centos:centos:libreoffice-pdfimport", "p-cpe:/a:centos:centos:libreoffice-filters", "p-cpe:/a:centos:centos:libreoffice-langpack-nn", "p-cpe:/a:centos:centos:libreoffice-xsltfilter", "p-cpe:/a:centos:centos:autocorr-ru", "p-cpe:/a:centos:centos:libabw-tools", "p-cpe:/a:centos:centos:libreoffice-langpack-nr", "p-cpe:/a:centos:centos:libreoffice-langpack-sv", "p-cpe:/a:centos:centos:libreoffice-langpack-dz", "p-cpe:/a:centos:centos:libreoffice-langpack-kn", "p-cpe:/a:centos:centos:autocorr-af", "p-cpe:/a:centos:centos:autocorr-ko", "p-cpe:/a:centos:centos:libreoffice-langpack-or", "p-cpe:/a:centos:centos:autocorr-de", "p-cpe:/a:centos:centos:autocorr-mn", "p-cpe:/a:centos:centos:libreoffice-graphicfilter", "p-cpe:/a:centos:centos:libreoffice-rhino", "p-cpe:/a:centos:centos:libreoffice-langpack-el", "p-cpe:/a:centos:centos:autocorr-en", "p-cpe:/a:centos:centos:libreoffice-langpack-en", "p-cpe:/a:centos:centos:libabw", "p-cpe:/a:centos:centos:libreoffice-base", "p-cpe:/a:centos:centos:libodfgen-devel", "p-cpe:/a:centos:centos:libreoffice-langpack-pl", "p-cpe:/a:centos:centos:libreoffice-langpack-ga", "p-cpe:/a:centos:centos:libreoffice-calc", "p-cpe:/a:centos:centos:libreoffice-impress", "p-cpe:/a:centos:centos:autocorr-sv", "p-cpe:/a:centos:centos:libreoffice-langpack-ml", "p-cpe:/a:centos:centos:autocorr-vi", "p-cpe:/a:centos:centos:libreoffice-draw", "p-cpe:/a:centos:centos:libreoffice-gdb-debug-support", "p-cpe:/a:centos:centos:libreoffice-langpack-fa", "p-cpe:/a:centos:centos:libreoffice-langpack-mai", "p-cpe:/a:centos:centos:libreoffice-langpack-si", "p-cpe:/a:centos:centos:autocorr-pt", "p-cpe:/a:centos:centos:libfreehand-doc", "p-cpe:/a:centos:centos:autocorr-hu", "p-cpe:/a:centos:centos:libreoffice-langpack-nso", "p-cpe:/a:centos:centos:libreoffice-langpack-sl", "p-cpe:/a:centos:centos:autocorr-ga", "p-cpe:/a:centos:centos:libreoffice-core", "p-cpe:/a:centos:centos:libreoffice-wiki-publisher", "p-cpe:/a:centos:centos:libreoffice-sdk-doc", "p-cpe:/a:centos:centos:libreoffice-langpack-cs", "p-cpe:/a:centos:centos:autocorr-lb", "p-cpe:/a:centos:centos:autocorr-hr", "p-cpe:/a:centos:centos:libreoffice-langpack-hi", "p-cpe:/a:centos:centos:libetonyek-doc", "p-cpe:/a:centos:centos:libodfgen", "cpe:/o:centos:centos:7", "p-cpe:/a:centos:centos:libreoffice-ogltrans", "p-cpe:/a:centos:centos:libreoffice-langpack-gl", "p-cpe:/a:centos:centos:autocorr-da", "p-cpe:/a:centos:centos:autocorr-bg", "p-cpe:/a:centos:centos:libreoffice-langpack-gu", "p-cpe:/a:centos:centos:autocorr-sr", "p-cpe:/a:centos:centos:libetonyek-devel", "p-cpe:/a:centos:centos:libreoffice-langpack-ko", "p-cpe:/a:centos:centos:libreoffice-langpack-pt-BR", "p-cpe:/a:centos:centos:libreoffice-langpack-zu", "p-cpe:/a:centos:centos:libreoffice-headless", "p-cpe:/a:centos:centos:libreoffice-langpack-lv", "p-cpe:/a:centos:centos:libreoffice-langpack-es", "p-cpe:/a:centos:centos:libreoffice-langpack-ar", "p-cpe:/a:centos:centos:libreoffice-langpack-st", "p-cpe:/a:centos:centos:libreoffice-math", "p-cpe:/a:centos:centos:libreoffice-langpack-fi", "p-cpe:/a:centos:centos:libreoffice-langpack-af", "p-cpe:/a:centos:centos:libreoffice-langpack-nl", "p-cpe:/a:centos:centos:libreoffice-langpack-tn", "p-cpe:/a:centos:centos:libmwaw-tools", "p-cpe:/a:centos:centos:libreoffice-langpack-ro", "p-cpe:/a:centos:centos:autocorr-lt", "p-cpe:/a:centos:centos:autocorr-ro", "p-cpe:/a:centos:centos:libreoffice-langpack-ta", "p-cpe:/a:centos:centos:libreoffice-langpack-bg", "p-cpe:/a:centos:centos:libfreehand-tools", "p-cpe:/a:centos:centos:libreoffice-langpack-as", "p-cpe:/a:centos:centos:libodfgen-doc", "p-cpe:/a:centos:centos:libreoffice-opensymbol-fonts", "p-cpe:/a:centos:centos:libreoffice-langpack-lt", "p-cpe:/a:centos:centos:libreoffice", "p-cpe:/a:centos:centos:liblangtag-gobject", "p-cpe:/a:centos:centos:libreoffice-langpack-cy", "p-cpe:/a:centos:centos:autocorr-ja", "p-cpe:/a:centos:centos:liblangtag-devel", "p-cpe:/a:centos:centos:libreoffice-glade", "p-cpe:/a:centos:centos:libcmis-devel", "p-cpe:/a:centos:centos:libreoffice-langpack-da", "p-cpe:/a:centos:centos:libreoffice-langpack-hr", "p-cpe:/a:centos:centos:libabw-devel", "p-cpe:/a:centos:centos:autocorr-it", "p-cpe:/a:centos:centos:libmwaw-devel", "p-cpe:/a:centos:centos:libfreehand", "p-cpe:/a:centos:centos:libreoffice-langpack-de", "p-cpe:/a:centos:centos:libreoffice-langpack-mr", "p-cpe:/a:centos:centos:libreoffice-langpack-kk", "p-cpe:/a:centos:centos:libreoffice-langpack-zh-Hant", "p-cpe:/a:centos:centos:libreoffice-langpack-ss", "p-cpe:/a:centos:centos:autocorr-fr", "p-cpe:/a:centos:centos:libreoffice-langpack-sr", "p-cpe:/a:centos:centos:libreoffice-langpack-br", "p-cpe:/a:centos:centos:libreoffice-langpack-he", "p-cpe:/a:centos:centos:libcmis-tools", "p-cpe:/a:centos:centos:libreoffice-langpack-pa", "p-cpe:/a:centos:centos:libreoffice-nlpsolver", "p-cpe:/a:centos:centos:libreoffice-langpack-th", "p-cpe:/a:centos:centos:libreoffice-langpack-tr", "p-cpe:/a:centos:centos:autocorr-nl", "p-cpe:/a:centos:centos:libreoffice-langpack-nb", "p-cpe:/a:centos:centos:libreoffice-pyuno", "p-cpe:/a:centos:centos:autocorr-pl", "p-cpe:/a:centos:centos:libfreehand-devel", "p-cpe:/a:centos:centos:libreoffice-langpack-fr", "p-cpe:/a:centos:centos:liblangtag", "p-cpe:/a:centos:centos:libreoffice-langpack-et", "p-cpe:/a:centos:centos:libreoffice-langpack-ja", "p-cpe:/a:centos:centos:libreoffice-sdk", "p-cpe:/a:centos:centos:autocorr-sk", "p-cpe:/a:centos:centos:libreoffice-langpack-uk", "p-cpe:/a:centos:centos:libreoffice-langpack-ca", "p-cpe:/a:centos:centos:libcmis", "p-cpe:/a:centos:centos:libreoffice-writer", "p-cpe:/a:centos:centos:autocorr-ca", "p-cpe:/a:centos:centos:autocorr-zh", "p-cpe:/a:centos:centos:libetonyek-tools", "p-cpe:/a:centos:centos:libreoffice-langpack-ts", "p-cpe:/a:centos:centos:autocorr-cs", "p-cpe:/a:centos:centos:autocorr-fa", "p-cpe:/a:centos:centos:autocorr-tr", "p-cpe:/a:centos:centos:libreoffice-ure", "p-cpe:/a:centos:centos:libmwaw", "p-cpe:/a:centos:centos:libreoffice-emailmerge", "p-cpe:/a:centos:centos:autocorr-es", "p-cpe:/a:centos:centos:libreoffice-langpack-ve", "p-cpe:/a:centos:centos:libreoffice-langpack-hu", "p-cpe:/a:centos:centos:liblangtag-doc", "p-cpe:/a:centos:centos:libreoffice-postgresql", "p-cpe:/a:centos:centos:libreoffice-langpack-sk", "p-cpe:/a:centos:centos:libreoffice-langpack-xh", "p-cpe:/a:centos:centos:libreoffice-langpack-ru", "p-cpe:/a:centos:centos:mdds-devel", "p-cpe:/a:centos:centos:libreoffice-langpack-it", "p-cpe:/a:centos:centos:libreoffice-langpack-pt-PT", "p-cpe:/a:centos:centos:libetonyek", "p-cpe:/a:centos:centos:libreoffice-langpack-eu", "p-cpe:/a:centos:centos:libreoffice-langpack-bn", "p-cpe:/a:centos:centos:libmwaw-doc", "p-cpe:/a:centos:centos:libreoffice-bsh", "p-cpe:/a:centos:centos:autocorr-is", "p-cpe:/a:centos:centos:libabw-doc", "p-cpe:/a:centos:centos:autocorr-sl", "p-cpe:/a:centos:centos:libreoffice-langpack-zh-Hans", "p-cpe:/a:centos:centos:libreoffice-langpack-te", "p-cpe:/a:centos:centos:libreoffice-librelogo"], "id": "CENTOS_RHSA-2015-0377.NASL", "href": "https://www.tenable.com/plugins/nessus/81892", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2015:0377 and \n# CentOS Errata and Security Advisory 2015:0377 respectively.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(81892);\n script_version(\"1.11\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/04\");\n\n script_cve_id(\"CVE-2014-0247\", \"CVE-2014-3575\", \"CVE-2014-3693\");\n script_xref(name:\"RHSA\", value:\"2015:0377\");\n\n script_name(english:\"CentOS 7 : libabw / libcmis / libetonyek / libfreehand / liblangtag / libmwaw / libodfgen / etc (CESA-2015:0377)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote CentOS host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated libreoffice packages that fix three security issues, several\nbugs, and add various enhancements are now available for Red Hat\nEnterprise Linux 7.\n\nRed Hat Product Security has rated this update as having Moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.\n\nLibreOffice is an open source, community-developed office productivity\nsuite. It includes key desktop applications, such as a word processor,\na spreadsheet, a presentation manager, a formula editor, and a drawing\nprogram. LibreOffice replaces OpenOffice and provides a similar but\nenhanced and extended office suite.\n\nIt was found that LibreOffice documents executed macros\nunconditionally, without user approval, when these documents were\nopened using LibreOffice. An attacker could use this flaw to execute\narbitrary code as the user running LibreOffice by embedding malicious\nVBA scripts in the document as macros. (CVE-2014-0247)\n\nA flaw was found in the OLE (Object Linking and Embedding) generation\nin LibreOffice. An attacker could use this flaw to embed malicious OLE\ncode in a LibreOffice document, allowing for arbitrary code execution.\n(CVE-2014-3575)\n\nA use-after-free flaw was found in the 'Remote Control' capabilities\nof the LibreOffice Impress application. An attacker could use this\nflaw to remotely execute code with the permissions of the user running\nLibreOffice Impress. (CVE-2014-3693)\n\nThe libreoffice packages have been upgraded to upstream version\n4.2.6.3, which provides a number of bug fixes and enhancements over\nthe previous version. Among others :\n\n* Improved OpenXML interoperability.\n\n* Additional statistic functions in Calc (for interoperability with\nExcel and Excel's Add-in 'Analysis ToolPak').\n\n* Various performance improvements in Calc.\n\n* Apple Keynote and Abiword import.\n\n* Improved MathML export.\n\n* New Start screen with thumbnails of recently opened documents.\n\n* Visual clue in Slide Sorter when a slide has a transition or an\nanimation.\n\n* Improvements for trend lines in charts.\n\n* Support for BCP-47 language tags. (BZ#1119709)\n\nAll libreoffice users are advised to upgrade to these updated\npackages, which correct these issues and add these enhancements.\"\n );\n # https://lists.centos.org/pipermail/centos-cr-announce/2015-March/001613.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?84e20af9\"\n );\n # https://lists.centos.org/pipermail/centos-cr-announce/2015-March/001615.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?f008647c\"\n );\n # https://lists.centos.org/pipermail/centos-cr-announce/2015-March/001620.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?a7e0f71b\"\n );\n # https://lists.centos.org/pipermail/centos-cr-announce/2015-March/001621.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?9a8d4c6d\"\n );\n # https://lists.centos.org/pipermail/centos-cr-announce/2015-March/001634.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?9005f5f4\"\n );\n # https://lists.centos.org/pipermail/centos-cr-announce/2015-March/001639.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?4cba4565\"\n );\n # https://lists.centos.org/pipermail/centos-cr-announce/2015-March/001645.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?24ac9ab1\"\n );\n # https://lists.centos.org/pipermail/centos-cr-announce/2015-March/001651.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?a4e59bf7\"\n );\n # https://lists.centos.org/pipermail/centos-cr-announce/2015-March/001676.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?b7397d55\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2014-0247\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-af\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-bg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-ca\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-cs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-da\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-de\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-en\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-es\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-fa\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-fi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-fr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-ga\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-hr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-hu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-is\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-it\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-ja\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-ko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-lb\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-lt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-mn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-nl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-pl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-pt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-ro\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-ru\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-sk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-sl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-sr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-sv\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-tr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-vi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:autocorr-zh\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libabw\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libabw-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libabw-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libabw-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libcmis\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libcmis-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libcmis-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libetonyek\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libetonyek-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libetonyek-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libetonyek-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libfreehand\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libfreehand-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libfreehand-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libfreehand-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:liblangtag\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:liblangtag-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:liblangtag-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:liblangtag-gobject\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libmwaw\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libmwaw-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libmwaw-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libmwaw-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libodfgen\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libodfgen-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libodfgen-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-bsh\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-calc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-core\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-draw\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-emailmerge\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-filters\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-gdb-debug-support\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-glade\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-graphicfilter\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-headless\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-impress\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-af\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-ar\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-as\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-bg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-bn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-br\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-ca\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-cs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-cy\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-da\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-de\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-dz\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-el\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-en\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-es\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-et\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-eu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-fa\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-fi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-fr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-ga\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-gl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-gu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-he\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-hi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-hr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-hu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-it\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-ja\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-kk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-kn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-ko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-lt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-lv\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-mai\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-ml\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-mr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-nb\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-nl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-nn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-nr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-nso\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-or\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-pa\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-pl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-pt-BR\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-pt-PT\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-ro\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-ru\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-si\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-sk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-sl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-sr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-ss\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-st\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-sv\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-ta\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-te\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-th\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-tn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-tr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-ts\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-uk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-ve\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-xh\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-zh-Hans\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-zh-Hant\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-langpack-zu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-librelogo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-math\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-nlpsolver\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-ogltrans\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-opensymbol-fonts\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-pdfimport\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-postgresql\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-pyuno\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-rhino\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-sdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-sdk-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-ure\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-wiki-publisher\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-writer\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:libreoffice-xsltfilter\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:mdds-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:centos:centos:7\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2014/07/03\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/03/17\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/03/18\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"CentOS Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/CentOS/release\", \"Host/CentOS/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/CentOS/release\");\nif (isnull(release) || \"CentOS\" >!< release) audit(AUDIT_OS_NOT, \"CentOS\");\nos_ver = pregmatch(pattern: \"CentOS(?: Linux)? release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"CentOS\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^7([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"CentOS 7.x\", \"CentOS \" + os_ver);\n\nif (!get_kb_item(\"Host/CentOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"CentOS\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-af-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-bg-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-ca-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-cs-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-da-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-de-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-en-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-es-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-fa-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-fi-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-fr-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-ga-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-hr-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-hu-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-is-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-it-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-ja-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-ko-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-lb-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-lt-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-mn-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-nl-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-pl-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-pt-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-ro-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-ru-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-sk-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-sl-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-sr-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-sv-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-tr-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-vi-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"autocorr-zh-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libabw-0.0.2-1.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libabw-devel-0.0.2-1.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libabw-doc-0.0.2-1.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libabw-tools-0.0.2-1.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libcmis-0.4.1-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libcmis-devel-0.4.1-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libcmis-tools-0.4.1-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libetonyek-0.0.4-2.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libetonyek-devel-0.0.4-2.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libetonyek-doc-0.0.4-2.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libetonyek-tools-0.0.4-2.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libfreehand-0.0.0-3.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libfreehand-devel-0.0.0-3.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libfreehand-doc-0.0.0-3.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libfreehand-tools-0.0.0-3.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"liblangtag-0.5.4-8.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"liblangtag-devel-0.5.4-8.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"liblangtag-doc-0.5.4-8.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"liblangtag-gobject-0.5.4-8.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libmwaw-0.2.0-4.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libmwaw-devel-0.2.0-4.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libmwaw-doc-0.2.0-4.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libmwaw-tools-0.2.0-4.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libodfgen-0.0.4-1.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libodfgen-devel-0.0.4-1.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libodfgen-doc-0.0.4-1.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-base-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-bsh-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-calc-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-core-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-draw-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-emailmerge-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-filters-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-gdb-debug-support-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-glade-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-graphicfilter-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-headless-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-impress-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-af-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ar-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-as-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-bg-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-bn-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-br-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ca-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-cs-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-cy-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-da-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-de-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-dz-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-el-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-en-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-es-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-et-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-eu-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-fa-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-fi-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-fr-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ga-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-gl-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-gu-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-he-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-hi-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-hr-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-hu-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-it-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ja-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-kk-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-kn-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ko-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-lt-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-lv-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-mai-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ml-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-mr-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-nb-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-nl-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-nn-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-nr-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-nso-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-or-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-pa-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-pl-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-pt-BR-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-pt-PT-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ro-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ru-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-si-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-sk-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-sl-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-sr-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ss-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-st-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-sv-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ta-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-te-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-th-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-tn-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-tr-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ts-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-uk-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ve-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-xh-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-zh-Hans-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-zh-Hant-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-zu-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-librelogo-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-math-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-nlpsolver-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-ogltrans-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-opensymbol-fonts-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-pdfimport-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-postgresql-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-pyuno-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-rhino-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-sdk-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-sdk-doc-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-ure-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-wiki-publisher-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-writer-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"libreoffice-xsltfilter-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"mdds-devel-0.10.3-1.el7\")) flag++;\n\n\nif (flag)\n{\n cr_plugin_caveat = '\\n' +\n 'NOTE: The security advisory associated with this vulnerability has a\\n' +\n 'fixed package version that may only be available in the continuous\\n' +\n 'release (CR) repository for CentOS, until it is present in the next\\n' +\n 'point release of CentOS.\\n\\n' +\n\n 'If an equal or higher package level does not exist in the baseline\\n' +\n 'repository for your major version of CentOS, then updates from the CR\\n' +\n 'repository will need to be applied in order to address the\\n' +\n 'vulnerability.\\n';\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get() + cr_plugin_caveat\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc\");\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-01-17T13:48:42", "description": "It was found that LibreOffice documents executed macros\nunconditionally, without user approval, when these documents were\nopened using LibreOffice. An attacker could use this flaw to execute\narbitrary code as the user running LibreOffice by embedding malicious\nVBA scripts in the document as macros. (CVE-2014-0247)\n\nA flaw was found in the OLE (Object Linking and Embedding) generation\nin LibreOffice. An attacker could use this flaw to embed malicious OLE\ncode in a LibreOffice document, allowing for arbitrary code execution.\n(CVE-2014-3575)\n\nA use-after-free flaw was found in the 'Remote Control' capabilities\nof the LibreOffice Impress application. An attacker could use this\nflaw to remotely execute code with the permissions of the user running\nLibreOffice Impress. (CVE-2014-3693)\n\nThe libreoffice packages have been upgraded to upstream version\n4.2.6.3, which provides a number of bug fixes and enhancements over\nthe previous version. Among others :\n\n - Improved OpenXML interoperability.\n\n - Additional statistic functions in Calc (for\n interoperability with Excel and Excel's Add-in 'Analysis\n ToolPak').\n\n - Various performance improvements in Calc.\n\n - Apple Keynote and Abiword import.\n\n - Improved MathML export.\n\n - New Start screen with thumbnails of recently opened\n documents.\n\n - Visual clue in Slide Sorter when a slide has a\n transition or an animation.\n\n - Improvements for trend lines in charts.\n\n - Support for BCP-47 language tags.", "edition": 15, "published": "2015-03-26T00:00:00", "title": "Scientific Linux Security Update : libreoffice on SL7.x x86_64 (20150305)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2014-3575", "CVE-2014-3693", "CVE-2014-0247"], "modified": "2015-03-26T00:00:00", "cpe": ["p-cpe:/a:fermilab:scientific_linux:libetonyek-devel", "p-cpe:/a:fermilab:scientific_linux:libreoffice-nlpsolver", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-el", "p-cpe:/a:fermilab:scientific_linux:libreoffice-filters", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-zu", "p-cpe:/a:fermilab:scientific_linux:libreoffice-pdfimport", "p-cpe:/a:fermilab:scientific_linux:autocorr-fa", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ar", "p-cpe:/a:fermilab:scientific_linux:libreoffice-opensymbol-fonts", "p-cpe:/a:fermilab:scientific_linux:libfreehand-debuginfo", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ts", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ga", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ss", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-kn", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-uk", "p-cpe:/a:fermilab:scientific_linux:libodfgen-devel", "p-cpe:/a:fermilab:scientific_linux:autocorr-pl", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-eu", "p-cpe:/a:fermilab:scientific_linux:libreoffice-librelogo", "p-cpe:/a:fermilab:scientific_linux:libreoffice-graphicfilter", "p-cpe:/a:fermilab:scientific_linux:libreoffice", "p-cpe:/a:fermilab:scientific_linux:libreoffice-math", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ja", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-tr", "p-cpe:/a:fermilab:scientific_linux:libmwaw-tools", "p-cpe:/a:fermilab:scientific_linux:autocorr-lt", "p-cpe:/a:fermilab:scientific_linux:mdds-devel", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-pt-PT", "p-cpe:/a:fermilab:scientific_linux:libodfgen-debuginfo", "p-cpe:/a:fermilab:scientific_linux:autocorr-ro", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-zh-Hant", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-et", "p-cpe:/a:fermilab:scientific_linux:libabw-debuginfo", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-bn", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-cy", "p-cpe:/a:fermilab:scientific_linux:autocorr-en", "p-cpe:/a:fermilab:scientific_linux:autocorr-bg", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-zh-Hans", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-lt", "p-cpe:/a:fermilab:scientific_linux:libreoffice-sdk", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-fa", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-th", "p-cpe:/a:fermilab:scientific_linux:libreoffice-ogltrans", "p-cpe:/a:fermilab:scientific_linux:autocorr-sv", "p-cpe:/a:fermilab:scientific_linux:libmwaw", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-sl", "p-cpe:/a:fermilab:scientific_linux:autocorr-cs", "p-cpe:/a:fermilab:scientific_linux:autocorr-sk", "p-cpe:/a:fermilab:scientific_linux:libabw-doc", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-or", "p-cpe:/a:fermilab:scientific_linux:liblangtag-devel", "p-cpe:/a:fermilab:scientific_linux:autocorr-ga", "p-cpe:/a:fermilab:scientific_linux:libreoffice-base", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-br", "p-cpe:/a:fermilab:scientific_linux:libabw-tools", "p-cpe:/a:fermilab:scientific_linux:libodfgen", "p-cpe:/a:fermilab:scientific_linux:autocorr-de", "p-cpe:/a:fermilab:scientific_linux:autocorr-da", "p-cpe:/a:fermilab:scientific_linux:libreoffice-gdb-debug-support", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-st", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-fi", "p-cpe:/a:fermilab:scientific_linux:autocorr-fr", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-en", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-de", "p-cpe:/a:fermilab:scientific_linux:libfreehand", "p-cpe:/a:fermilab:scientific_linux:autocorr-es", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-da", "p-cpe:/a:fermilab:scientific_linux:autocorr-af", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ru", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-nb", "p-cpe:/a:fermilab:scientific_linux:libfreehand-devel", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-nl", "p-cpe:/a:fermilab:scientific_linux:libabw-devel", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-as", "p-cpe:/a:fermilab:scientific_linux:autocorr-sr", "p-cpe:/a:fermilab:scientific_linux:autocorr-hr", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-mai", "p-cpe:/a:fermilab:scientific_linux:autocorr-it", "p-cpe:/a:fermilab:scientific_linux:libreoffice-calc", "p-cpe:/a:fermilab:scientific_linux:libreoffice-glade", "p-cpe:/a:fermilab:scientific_linux:libreoffice-emailmerge", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-nso", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-bg", "p-cpe:/a:fermilab:scientific_linux:autocorr-ca", "p-cpe:/a:fermilab:scientific_linux:autocorr-mn", "p-cpe:/a:fermilab:scientific_linux:libfreehand-tools", "p-cpe:/a:fermilab:scientific_linux:liblangtag-debuginfo", "p-cpe:/a:fermilab:scientific_linux:liblangtag-doc", "p-cpe:/a:fermilab:scientific_linux:libetonyek", "p-cpe:/a:fermilab:scientific_linux:autocorr-tr", "p-cpe:/a:fermilab:scientific_linux:libreoffice-bsh", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-tn", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-af", "p-cpe:/a:fermilab:scientific_linux:libreoffice-ure", "p-cpe:/a:fermilab:scientific_linux:libodfgen-doc", "p-cpe:/a:fermilab:scientific_linux:libreoffice-core", "p-cpe:/a:fermilab:scientific_linux:autocorr-vi", "p-cpe:/a:fermilab:scientific_linux:libreoffice-wiki-publisher", "p-cpe:/a:fermilab:scientific_linux:libreoffice-debuginfo", "p-cpe:/a:fermilab:scientific_linux:libreoffice-pyuno", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-es", "p-cpe:/a:fermilab:scientific_linux:libcmis-tools", "p-cpe:/a:fermilab:scientific_linux:libreoffice-writer", "p-cpe:/a:fermilab:scientific_linux:autocorr-ru", "p-cpe:/a:fermilab:scientific_linux:libreoffice-sdk-doc", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-hi", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-hr", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-pt-BR", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-nr", "p-cpe:/a:fermilab:scientific_linux:libmwaw-doc", "p-cpe:/a:fermilab:scientific_linux:libetonyek-tools", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-he", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-te", "p-cpe:/a:fermilab:scientific_linux:autocorr-ja", "p-cpe:/a:fermilab:scientific_linux:autocorr-is", "p-cpe:/a:fermilab:scientific_linux:libreoffice-rhino", "p-cpe:/a:fermilab:scientific_linux:autocorr-fi", "p-cpe:/a:fermilab:scientific_linux:libmwaw-debuginfo", "p-cpe:/a:fermilab:scientific_linux:libabw", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-dz", "p-cpe:/a:fermilab:scientific_linux:libreoffice-headless", "p-cpe:/a:fermilab:scientific_linux:libetonyek-doc", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-sr", "p-cpe:/a:fermilab:scientific_linux:liblangtag-gobject", "p-cpe:/a:fermilab:scientific_linux:liblangtag", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ml", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-si", "p-cpe:/a:fermilab:scientific_linux:autocorr-pt", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-kk", "p-cpe:/a:fermilab:scientific_linux:libmwaw-devel", "p-cpe:/a:fermilab:scientific_linux:libcmis-debuginfo", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-cs", "x-cpe:/o:fermilab:scientific_linux", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-fr", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ko", "p-cpe:/a:fermilab:scientific_linux:libreoffice-impress", "p-cpe:/a:fermilab:scientific_linux:autocorr-lb", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-lv", "p-cpe:/a:fermilab:scientific_linux:libetonyek-debuginfo", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ro", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-hu", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-mr", "p-cpe:/a:fermilab:scientific_linux:autocorr-sl", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-gl", "p-cpe:/a:fermilab:scientific_linux:libreoffice-postgresql", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-gu", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-sv", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-sk", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-it", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ta", "p-cpe:/a:fermilab:scientific_linux:autocorr-nl", "p-cpe:/a:fermilab:scientific_linux:libfreehand-doc", "p-cpe:/a:fermilab:scientific_linux:libcmis-devel", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-pa", "p-cpe:/a:fermilab:scientific_linux:autocorr-hu", "p-cpe:/a:fermilab:scientific_linux:libcmis", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ca", "p-cpe:/a:fermilab:scientific_linux:libreoffice-xsltfilter", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-xh", "p-cpe:/a:fermilab:scientific_linux:autocorr-zh", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-pl", "p-cpe:/a:fermilab:scientific_linux:autocorr-ko", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ve", "p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-nn", "p-cpe:/a:fermilab:scientific_linux:libreoffice-draw"], "id": "SL_20150305_LIBREOFFICE_ON_SL7_X.NASL", "href": "https://www.tenable.com/plugins/nessus/82256", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text is (C) Scientific Linux.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(82256);\n script_version(\"1.7\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n\n script_cve_id(\"CVE-2014-0247\", \"CVE-2014-3575\", \"CVE-2014-3693\");\n\n script_name(english:\"Scientific Linux Security Update : libreoffice on SL7.x x86_64 (20150305)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Scientific Linux host is missing one or more security\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"It was found that LibreOffice documents executed macros\nunconditionally, without user approval, when these documents were\nopened using LibreOffice. An attacker could use this flaw to execute\narbitrary code as the user running LibreOffice by embedding malicious\nVBA scripts in the document as macros. (CVE-2014-0247)\n\nA flaw was found in the OLE (Object Linking and Embedding) generation\nin LibreOffice. An attacker could use this flaw to embed malicious OLE\ncode in a LibreOffice document, allowing for arbitrary code execution.\n(CVE-2014-3575)\n\nA use-after-free flaw was found in the 'Remote Control' capabilities\nof the LibreOffice Impress application. An attacker could use this\nflaw to remotely execute code with the permissions of the user running\nLibreOffice Impress. (CVE-2014-3693)\n\nThe libreoffice packages have been upgraded to upstream version\n4.2.6.3, which provides a number of bug fixes and enhancements over\nthe previous version. Among others :\n\n - Improved OpenXML interoperability.\n\n - Additional statistic functions in Calc (for\n interoperability with Excel and Excel's Add-in 'Analysis\n ToolPak').\n\n - Various performance improvements in Calc.\n\n - Apple Keynote and Abiword import.\n\n - Improved MathML export.\n\n - New Start screen with thumbnails of recently opened\n documents.\n\n - Visual clue in Slide Sorter when a slide has a\n transition or an animation.\n\n - Improvements for trend lines in charts.\n\n - Support for BCP-47 language tags.\"\n );\n # https://listserv.fnal.gov/scripts/wa.exe?A2=ind1503&L=scientific-linux-errata&T=0&P=2039\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?0a63264d\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-af\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-bg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-ca\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-cs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-da\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-de\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-en\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-es\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-fa\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-fi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-fr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-ga\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-hr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-hu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-is\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-it\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-ja\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-ko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-lb\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-lt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-mn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-nl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-pl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-pt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-ro\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-ru\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-sk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-sl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-sr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-sv\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-tr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-vi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:autocorr-zh\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libabw\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libabw-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libabw-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libabw-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libabw-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libcmis\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libcmis-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libcmis-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libcmis-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libetonyek\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libetonyek-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libetonyek-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libetonyek-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libetonyek-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libfreehand\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libfreehand-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libfreehand-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libfreehand-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libfreehand-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:liblangtag\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:liblangtag-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:liblangtag-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:liblangtag-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:liblangtag-gobject\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libmwaw\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libmwaw-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libmwaw-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libmwaw-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libmwaw-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libodfgen\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libodfgen-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libodfgen-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libodfgen-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-bsh\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-calc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-core\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-draw\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-emailmerge\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-filters\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-gdb-debug-support\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-glade\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-graphicfilter\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-headless\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-impress\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-af\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ar\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-as\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-bg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-bn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-br\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ca\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-cs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-cy\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-da\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-de\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-dz\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-el\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-en\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-es\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-et\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-eu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-fa\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-fi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-fr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ga\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-gl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-gu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-he\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-hi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-hr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-hu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-it\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ja\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-kk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-kn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-lt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-lv\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-mai\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ml\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-mr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-nb\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-nl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-nn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-nr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-nso\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-or\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-pa\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-pl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-pt-BR\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-pt-PT\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ro\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ru\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-si\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-sk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-sl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-sr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ss\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-st\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-sv\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ta\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-te\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-th\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-tn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-tr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ts\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-uk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-ve\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-xh\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-zh-Hans\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-zh-Hant\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-langpack-zu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-librelogo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-math\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-nlpsolver\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-ogltrans\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-opensymbol-fonts\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-pdfimport\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-postgresql\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-pyuno\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-rhino\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-sdk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-sdk-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-ure\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-wiki-publisher\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-writer\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:libreoffice-xsltfilter\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:mdds-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"x-cpe:/o:fermilab:scientific_linux\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2014/07/03\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/03/05\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/03/26\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Scientific Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Scientific Linux \" >!< release) audit(AUDIT_HOST_NOT, \"running Scientific Linux\");\nos_ver = pregmatch(pattern: \"Scientific Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Scientific Linux\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^7([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Scientific Linux 7.x\", \"Scientific Linux \" + os_ver);\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu >!< \"x86_64\" && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Scientific Linux\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-af-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-bg-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-ca-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-cs-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-da-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-de-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-en-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-es-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-fa-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-fi-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-fr-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-ga-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-hr-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-hu-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-is-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-it-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-ja-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-ko-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-lb-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-lt-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-mn-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-nl-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-pl-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-pt-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-ro-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-ru-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-sk-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-sl-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-sr-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-sv-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-tr-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-vi-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"autocorr-zh-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libabw-0.0.2-1.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libabw-debuginfo-0.0.2-1.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libabw-devel-0.0.2-1.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"libabw-doc-0.0.2-1.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libabw-tools-0.0.2-1.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libcmis-0.4.1-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libcmis-debuginfo-0.4.1-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libcmis-devel-0.4.1-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libcmis-tools-0.4.1-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libetonyek-0.0.4-2.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libetonyek-debuginfo-0.0.4-2.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libetonyek-devel-0.0.4-2.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"libetonyek-doc-0.0.4-2.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libetonyek-tools-0.0.4-2.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libfreehand-0.0.0-3.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libfreehand-debuginfo-0.0.0-3.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libfreehand-devel-0.0.0-3.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"libfreehand-doc-0.0.0-3.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libfreehand-tools-0.0.0-3.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"liblangtag-0.5.4-8.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"liblangtag-debuginfo-0.5.4-8.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"liblangtag-devel-0.5.4-8.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"liblangtag-doc-0.5.4-8.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"liblangtag-gobject-0.5.4-8.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libmwaw-0.2.0-4.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libmwaw-debuginfo-0.2.0-4.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libmwaw-devel-0.2.0-4.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"libmwaw-doc-0.2.0-4.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libmwaw-tools-0.2.0-4.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libodfgen-0.0.4-1.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libodfgen-debuginfo-0.0.4-1.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libodfgen-devel-0.0.4-1.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"libodfgen-doc-0.0.4-1.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-base-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-bsh-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-calc-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-core-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-debuginfo-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-draw-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-emailmerge-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-filters-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-gdb-debug-support-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-glade-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-graphicfilter-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-headless-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-impress-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-af-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ar-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-as-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-bg-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-bn-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-br-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ca-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-cs-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-cy-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-da-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-de-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-dz-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-el-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-en-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-es-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-et-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-eu-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-fa-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-fi-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-fr-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ga-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-gl-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-gu-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-he-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-hi-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-hr-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-hu-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-it-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ja-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-kk-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-kn-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ko-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-lt-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-lv-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-mai-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ml-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-mr-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-nb-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-nl-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-nn-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-nr-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-nso-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-or-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-pa-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-pl-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-pt-BR-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-pt-PT-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ro-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ru-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-si-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-sk-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-sl-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-sr-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ss-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-st-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-sv-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ta-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-te-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-th-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-tn-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-tr-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ts-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-uk-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-ve-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-xh-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-zh-Hans-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-zh-Hant-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-langpack-zu-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-librelogo-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-math-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-nlpsolver-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-ogltrans-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"libreoffice-opensymbol-fonts-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-pdfimport-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-postgresql-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-pyuno-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-rhino-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-sdk-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-sdk-doc-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-ure-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-wiki-publisher-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-writer-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", cpu:\"x86_64\", reference:\"libreoffice-xsltfilter-4.2.6.3-5.el7\")) flag++;\nif (rpm_check(release:\"SL7\", reference:\"mdds-devel-0.10.3-1.el7\")) flag++;\n\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc\");\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-01-07T10:56:11", "description": "The remote host is affected by the vulnerability described in GLSA-201408-19\n(OpenOffice, LibreOffice: Multiple vulnerabilities)\n\n Multiple vulnerabilities have been discovered in OpenOffice and\n Libreoffice. Please review the CVE identifiers referenced below for\n details.\n \nImpact :\n\n A remote attacker could entice a user to open a specially crafted file\n using OpenOffice, possibly resulting in execution of arbitrary code with\n the privileges of the process, a Denial of Service condition, execution\n of arbitrary Python code, authentication bypass, or reading and writing\n of arbitrary files.\n \nWorkaround :\n\n There is no known workaround at this time.", "edition": 24, "published": "2014-09-01T00:00:00", "title": "GLSA-201408-19 : OpenOffice, LibreOffice: Multiple vulnerabilities", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2012-0037", "CVE-2009-3302", "CVE-2012-2665", "CVE-2010-3450", "CVE-2009-3301", "CVE-2009-0217", "CVE-2009-0200", "CVE-2009-2949", "CVE-2012-2149", "CVE-2011-2713", "CVE-2006-4339", "CVE-2010-3689", "CVE-2010-4253", "CVE-2012-2334", "CVE-2010-2935", "CVE-2010-3451", "CVE-2010-0395", "CVE-2009-2950", "CVE-2010-3454", "CVE-2010-4643", "CVE-2010-3453", "CVE-2014-0247", "CVE-2010-2936", "CVE-2009-0201", "CVE-2012-1149", "CVE-2010-3452"], "modified": "2014-09-01T00:00:00", "cpe": ["p-cpe:/a:gentoo:linux:libreoffice-bin", "cpe:/o:gentoo:linux", "p-cpe:/a:gentoo:linux:openoffice-bin", "p-cpe:/a:gentoo:linux:libreoffice", "p-cpe:/a:gentoo:linux:openoffice"], "id": "GENTOO_GLSA-201408-19.NASL", "href": "https://www.tenable.com/plugins/nessus/77467", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Gentoo Linux Security Advisory GLSA 201408-19.\n#\n# The advisory text is Copyright (C) 2001-2019 Gentoo Foundation, Inc.\n# and licensed under the Creative Commons - Attribution / Share Alike \n# license. See http://creativecommons.org/licenses/by-sa/3.0/\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(77467);\n script_version(\"1.12\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\"CVE-2006-4339\", \"CVE-2009-0200\", \"CVE-2009-0201\", \"CVE-2009-0217\", \"CVE-2009-2949\", \"CVE-2009-2950\", \"CVE-2009-3301\", \"CVE-2009-3302\", \"CVE-2010-0395\", \"CVE-2010-2935\", \"CVE-2010-2936\", \"CVE-2010-3450\", \"CVE-2010-3451\", \"CVE-2010-3452\", \"CVE-2010-3453\", \"CVE-2010-3454\", \"CVE-2010-3689\", \"CVE-2010-4253\", \"CVE-2010-4643\", \"CVE-2011-2713\", \"CVE-2012-0037\", \"CVE-2012-1149\", \"CVE-2012-2149\", \"CVE-2012-2334\", \"CVE-2012-2665\", \"CVE-2014-0247\");\n script_bugtraq_id(35671, 36200, 38218, 40599, 42202, 46031, 49969, 52681, 53570, 54769, 68151);\n script_xref(name:\"GLSA\", value:\"201408-19\");\n\n script_name(english:\"GLSA-201408-19 : OpenOffice, LibreOffice: Multiple vulnerabilities\");\n script_summary(english:\"Checks for updated package(s) in /var/db/pkg\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Gentoo host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The remote host is affected by the vulnerability described in GLSA-201408-19\n(OpenOffice, LibreOffice: Multiple vulnerabilities)\n\n Multiple vulnerabilities have been discovered in OpenOffice and\n Libreoffice. Please review the CVE identifiers referenced below for\n details.\n \nImpact :\n\n A remote attacker could entice a user to open a specially crafted file\n using OpenOffice, possibly resulting in execution of arbitrary code with\n the privileges of the process, a Denial of Service condition, execution\n of arbitrary Python code, authentication bypass, or reading and writing\n of arbitrary files.\n \nWorkaround :\n\n There is no known workaround at this time.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://security.gentoo.org/glsa/201408-19\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"All OpenOffice (binary) users should upgrade to the latest version:\n # emerge --sync\n # emerge --ask --oneshot --verbose\n '>=app-office/openoffice-bin-3.5.5.3'\n All LibreOffice users should upgrade to the latest version:\n # emerge --sync\n # emerge --ask --oneshot --verbose '>=app-office/libreoffice-4.2.5.2'\n All LibreOffice (binary) users should upgrade to the latest version:\n # emerge --sync\n # emerge --ask --oneshot --verbose\n '>=app-office/libreoffice-bin-4.2.5.2'\n We recommend that users unmerge OpenOffice:\n # emerge --unmerge 'app-office/openoffice'\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:F/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_core\", value:\"true\");\n script_cwe_id(94, 119, 189, 310);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:gentoo:linux:libreoffice\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:gentoo:linux:libreoffice-bin\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:gentoo:linux:openoffice\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:gentoo:linux:openoffice-bin\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:gentoo:linux\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2006/09/05\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2014/08/31\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2014/09/01\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2014-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Gentoo Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Gentoo/release\", \"Host/Gentoo/qpkg-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"qpkg.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Gentoo/release\")) audit(AUDIT_OS_NOT, \"Gentoo\");\nif (!get_kb_item(\"Host/Gentoo/qpkg-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\n\nif (qpkg_check(package:\"app-office/libreoffice\", unaffected:make_list(\"ge 4.2.5.2\"), vulnerable:make_list(\"lt 4.2.5.2\"))) flag++;\nif (qpkg_check(package:\"app-office/libreoffice-bin\", unaffected:make_list(\"ge 4.2.5.2\"), vulnerable:make_list(\"lt 4.2.5.2\"))) flag++;\nif (qpkg_check(package:\"app-office/openoffice-bin\", unaffected:make_list(\"ge 3.5.5.3\"), vulnerable:make_list(\"lt 3.5.5.3\"))) flag++;\nif (qpkg_check(package:\"app-office/openoffice\", unaffected:make_list(), vulnerable:make_list(\"le 3.5.5.3\"))) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:qpkg_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = qpkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"OpenOffice / LibreOffice\");\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "securityvulns": [{"lastseen": "2018-08-31T11:10:52", "bulletinFamily": "software", "cvelist": ["CVE-2014-0247"], "description": "\r\n\r\n==========================================================================\r\nUbuntu Security Notice USN-2253-1\r\nJune 23, 2014\r\n\r\nlibreoffice vulnerability\r\n==========================================================================\r\n\r\nA security issue affects these releases of Ubuntu and its derivatives:\r\n\r\n- Ubuntu 14.04 LTS\r\n\r\nSummary:\r\n\r\nLibreOffice would unconditionally execute certain VBA macros.\r\n\r\nSoftware Description:\r\n- libreoffice: Office productivity suite\r\n\r\nDetails:\r\n\r\nIt was discovered that LibreOffice unconditionally executed certain VBA\r\nmacros, contrary to user expectations.\r\n\r\nUpdate instructions:\r\n\r\nThe problem can be corrected by updating your system to the following\r\npackage versions:\r\n\r\nUbuntu 14.04 LTS:\r\n libreoffice-core 1:4.2.4-0ubuntu2\r\n\r\nAfter a standard system update you need to restart LibreOffice to makea all\r\nthe necessary changes.\r\n\r\nReferences:\r\n http://www.ubuntu.com/usn/usn-2253-1\r\n CVE-2014-0247\r\n\r\nPackage Information:\r\n https://launchpad.net/ubuntu/+source/libreoffice/1:4.2.4-0ubuntu2\r\n\r\n\r\n\r\n\r\n-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce\r\n\r\n", "edition": 1, "modified": "2014-06-26T00:00:00", "published": "2014-06-26T00:00:00", "id": "SECURITYVULNS:DOC:30908", "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:30908", "title": "[USN-2253-1] LibreOffice vulnerability", "type": "securityvulns", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-08-31T11:09:56", "bulletinFamily": "software", "cvelist": ["CVE-2014-0247"], "description": "Under some conditions, macros can be executed.", "edition": 1, "modified": "2014-06-26T00:00:00", "published": "2014-06-26T00:00:00", "id": "SECURITYVULNS:VULN:13857", "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:13857", "title": "LibreOffice code execution", "type": "securityvulns", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "debian": [{"lastseen": "2020-08-12T01:07:34", "bulletinFamily": "unix", "cvelist": ["CVE-2014-0247"], "description": "Rene Engelhard uploaded new packages for libreoffice which fixed the following\nsecurity problems:\n\nCVE-2014-0247\n It was discovered that LibreOffice unconditionally executed certain VBA\n macros, contrary to user expectations.\n\n https://security-tracker.debian.org/tracker/CVE-2014-0247\n\nThe stable distribution (wheezy) is not affected by this issue.\n\nFor the testing (jessie) and unstable (sid) distributions, these\nproblems have been fixed in version 1:4.2.5-1.\n\nFor the wheezy-backports distribution, these problems have been fixed in\nversion 1:4.2.5-1~bpo70+1.\n\n", "edition": 10, "modified": "2014-06-26T13:06:52", "published": "2014-06-26T13:06:52", "id": "DEBIAN:BSA-096:958E6", "href": "https://lists.debian.org/debian-backports-announce/2014/debian-backports-announce-201406/msg00000.html", "title": "[BSA-096] Security Update for libreoffice", "type": "debian", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "ubuntu": [{"lastseen": "2020-07-02T11:39:58", "bulletinFamily": "unix", "cvelist": ["CVE-2014-0247"], "description": "It was discovered that LibreOffice unconditionally executed certain VBA \nmacros, contrary to user expectations.", "edition": 5, "modified": "2014-06-23T00:00:00", "published": "2014-06-23T00:00:00", "id": "USN-2253-1", "href": "https://ubuntu.com/security/notices/USN-2253-1", "title": "LibreOffice vulnerability", "type": "ubuntu", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "centos": [{"lastseen": "2019-12-20T18:25:49", "bulletinFamily": "unix", "cvelist": ["CVE-2014-3575", "CVE-2014-3693", "CVE-2014-0247"], "description": "**CentOS Errata and Security Advisory** CESA-2015:0377\n\n\nLibreOffice is an open source, community-developed office productivity\nsuite. It includes key desktop applications, such as a word processor, a\nspreadsheet, a presentation manager, a formula editor, and a drawing\nprogram. LibreOffice replaces OpenOffice and provides a similar but\nenhanced and extended office suite.\n\nIt was found that LibreOffice documents executed macros unconditionally,\nwithout user approval, when these documents were opened using LibreOffice.\nAn attacker could use this flaw to execute arbitrary code as the user\nrunning LibreOffice by embedding malicious VBA scripts in the document as\nmacros. (CVE-2014-0247)\n\nA flaw was found in the OLE (Object Linking and Embedding) generation in\nLibreOffice. An attacker could use this flaw to embed malicious OLE code in\na LibreOffice document, allowing for arbitrary code execution.\n(CVE-2014-3575)\n\nA use-after-free flaw was found in the \"Remote Control\" capabilities of the\nLibreOffice Impress application. An attacker could use this flaw to\nremotely execute code with the permissions of the user running LibreOffice\nImpress. (CVE-2014-3693)\n\nThe libreoffice packages have been upgraded to upstream version 4.2.6.3,\nwhich provides a number of bug fixes and enhancements over the previous\nversion. Among others:\n\n* Improved OpenXML interoperability.\n\n* Additional statistic functions in Calc (for interoperability with Excel\nand Excel's Add-in \"Analysis ToolPak\").\n\n* Various performance improvements in Calc.\n\n* Apple Keynote and Abiword import.\n\n* Improved MathML export.\n\n* New Start screen with thumbnails of recently opened documents.\n\n* Visual clue in Slide Sorter when a slide has a transition or an\nanimation.\n\n* Improvements for trend lines in charts.\n\n* Support for BCP-47 language tags. (BZ#1119709)\n\nAll libreoffice users are advised to upgrade to these updated packages,\nwhich correct these issues and add these enhancements.\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-cr-announce/2015-March/007813.html\nhttp://lists.centos.org/pipermail/centos-cr-announce/2015-March/007815.html\nhttp://lists.centos.org/pipermail/centos-cr-announce/2015-March/007820.html\nhttp://lists.centos.org/pipermail/centos-cr-announce/2015-March/007821.html\nhttp://lists.centos.org/pipermail/centos-cr-announce/2015-March/007834.html\nhttp://lists.centos.org/pipermail/centos-cr-announce/2015-March/007839.html\nhttp://lists.centos.org/pipermail/centos-cr-announce/2015-March/007845.html\nhttp://lists.centos.org/pipermail/centos-cr-announce/2015-March/007851.html\nhttp://lists.centos.org/pipermail/centos-cr-announce/2015-March/007876.html\n\n**Affected packages:**\nautocorr-af\nautocorr-bg\nautocorr-ca\nautocorr-cs\nautocorr-da\nautocorr-de\nautocorr-en\nautocorr-es\nautocorr-fa\nautocorr-fi\nautocorr-fr\nautocorr-ga\nautocorr-hr\nautocorr-hu\nautocorr-is\nautocorr-it\nautocorr-ja\nautocorr-ko\nautocorr-lb\nautocorr-lt\nautocorr-mn\nautocorr-nl\nautocorr-pl\nautocorr-pt\nautocorr-ro\nautocorr-ru\nautocorr-sk\nautocorr-sl\nautocorr-sr\nautocorr-sv\nautocorr-tr\nautocorr-vi\nautocorr-zh\nlibabw\nlibabw-devel\nlibabw-doc\nlibabw-tools\nlibcmis\nlibcmis-devel\nlibcmis-tools\nlibetonyek\nlibetonyek-devel\nlibetonyek-doc\nlibetonyek-tools\nlibfreehand\nlibfreehand-devel\nlibfreehand-doc\nlibfreehand-tools\nliblangtag\nliblangtag-devel\nliblangtag-doc\nliblangtag-gobject\nlibmwaw\nlibmwaw-devel\nlibmwaw-doc\nlibmwaw-tools\nlibodfgen\nlibodfgen-devel\nlibodfgen-doc\nlibreoffice\nlibreoffice-base\nlibreoffice-bsh\nlibreoffice-calc\nlibreoffice-core\nlibreoffice-draw\nlibreoffice-emailmerge\nlibreoffice-filters\nlibreoffice-gdb-debug-support\nlibreoffice-glade\nlibreoffice-graphicfilter\nlibreoffice-headless\nlibreoffice-impress\nlibreoffice-langpack-af\nlibreoffice-langpack-ar\nlibreoffice-langpack-as\nlibreoffice-langpack-bg\nlibreoffice-langpack-bn\nlibreoffice-langpack-br\nlibreoffice-langpack-ca\nlibreoffice-langpack-cs\nlibreoffice-langpack-cy\nlibreoffice-langpack-da\nlibreoffice-langpack-de\nlibreoffice-langpack-dz\nlibreoffice-langpack-el\nlibreoffice-langpack-en\nlibreoffice-langpack-es\nlibreoffice-langpack-et\nlibreoffice-langpack-eu\nlibreoffice-langpack-fa\nlibreoffice-langpack-fi\nlibreoffice-langpack-fr\nlibreoffice-langpack-ga\nlibreoffice-langpack-gl\nlibreoffice-langpack-gu\nlibreoffice-langpack-he\nlibreoffice-langpack-hi\nlibreoffice-langpack-hr\nlibreoffice-langpack-hu\nlibreoffice-langpack-it\nlibreoffice-langpack-ja\nlibreoffice-langpack-kk\nlibreoffice-langpack-kn\nlibreoffice-langpack-ko\nlibreoffice-langpack-lt\nlibreoffice-langpack-lv\nlibreoffice-langpack-mai\nlibreoffice-langpack-ml\nlibreoffice-langpack-mr\nlibreoffice-langpack-nb\nlibreoffice-langpack-nl\nlibreoffice-langpack-nn\nlibreoffice-langpack-nr\nlibreoffice-langpack-nso\nlibreoffice-langpack-or\nlibreoffice-langpack-pa\nlibreoffice-langpack-pl\nlibreoffice-langpack-pt-BR\nlibreoffice-langpack-pt-PT\nlibreoffice-langpack-ro\nlibreoffice-langpack-ru\nlibreoffice-langpack-si\nlibreoffice-langpack-sk\nlibreoffice-langpack-sl\nlibreoffice-langpack-sr\nlibreoffice-langpack-ss\nlibreoffice-langpack-st\nlibreoffice-langpack-sv\nlibreoffice-langpack-ta\nlibreoffice-langpack-te\nlibreoffice-langpack-th\nlibreoffice-langpack-tn\nlibreoffice-langpack-tr\nlibreoffice-langpack-ts\nlibreoffice-langpack-uk\nlibreoffice-langpack-ve\nlibreoffice-langpack-xh\nlibreoffice-langpack-zh-Hans\nlibreoffice-langpack-zh-Hant\nlibreoffice-langpack-zu\nlibreoffice-librelogo\nlibreoffice-math\nlibreoffice-nlpsolver\nlibreoffice-ogltrans\nlibreoffice-opensymbol-fonts\nlibreoffice-pdfimport\nlibreoffice-postgresql\nlibreoffice-pyuno\nlibreoffice-rhino\nlibreoffice-sdk\nlibreoffice-sdk-doc\nlibreoffice-ure\nlibreoffice-wiki-publisher\nlibreoffice-writer\nlibreoffice-xsltfilter\nmdds-devel\n\n**Upstream details at:**\nhttps://rhn.redhat.com/errata/RHSA-2015-0377.html", "edition": 3, "modified": "2015-03-17T13:29:04", "published": "2015-03-17T13:28:31", "href": "http://lists.centos.org/pipermail/centos-cr-announce/2015-March/007813.html", "id": "CESA-2015:0377", "title": "autocorr, libabw, libcmis, libetonyek, libfreehand, liblangtag, libmwaw, libodfgen, libreoffice, mdds security update", "type": "centos", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "oraclelinux": [{"lastseen": "2020-10-22T17:11:57", "bulletinFamily": "unix", "cvelist": ["CVE-2014-3575", "CVE-2014-3693", "CVE-2014-0247"], "description": "libabw\n[0.0.2-1]\n- new upstream release 0.0.2\n- generate man pages for the tools\n[0.0.1-1]\n- new upstream release\nlibcmis\n[0.4.1-5]\n- Related: rhbz#1132065 coverity: fix mismatching exceptions\n[0.4.1-4]\n- a few use-after-free fixes for the C wrapper\n[0.4.1-3]\n- Resolves: rhbz#1132065 rebase to 0.4.1\nlibetonyek\n[0.0.4-2]\n- Related: rhbz#1130553 fix coverity issue\n[0.0.4-1]\n- new upstream release\n[0.0.3-2]\n- generate man pages\n[0.0.3-1]\n- new release\n[0.0.2-1]\n- new release\n[0.0.1-1]\n- new release\nlibfreehand\n[0.0.0-3]\n- fix memory leak\n[0.0.0-2]\n- add gperf to BuildRequires\n[0.0.0-1]\n- initial import\nliblangtag\n[0.5.4-8]\n- Related: rhbz#1132077 really resolve multilib conflict in -devel\n[0.5.4-7]\n- Related: rhbz#1132077 resolve multilib conflict in -devel\n[0.5.4-6]\n- Related: rhbz#1132077 add explicit dep on -gobject to -devel\n[0.5.4-5]\n- split GObject introspection files out of main package\n[0.5.3-1]\n- Resolves: rhbz#1132077 rebase to 0.5.4\nlibmwaw\n[0.2.0-4]\n- Resolves: rhbz#1132070 rebase to 0.2.0\nlibodfgen\n[0.0.4-1]\n- Resolves: rhbz#1132072 rebase to 0.0.4\nlibreoffice\n[1:4.2.6.3-5]\n- Resolves: rhbz#1098973 crash on exit\n[1:4.2.6.3-4]\n- Resolves: rhbz#1111216 LibreOffice Calc: PDF export of an empty document fails\n with Write Error\n[1:4.2.6.3-3]\n- CVE-2014-3693: Disable sdremote by default and improve flow control\n[1:4.2.6.3-2]\n- Related: rhbz#1119709 port LibreOffice to aarch64\n[1:4.2.6.3-1]\n- Resolves: rhbz#1119709 rebase to 4.2.6\n[1:4.1.4.2-4]\n- Resolves: rhbz#1125588 port LibreOffice to ppc64le\nmdds\n[0.10.3-1]\n- Resolves: rhbz#1132069 rebase to 0.10.3", "edition": 5, "modified": "2015-03-11T00:00:00", "published": "2015-03-11T00:00:00", "id": "ELSA-2015-0377", "href": "http://linux.oracle.com/errata/ELSA-2015-0377.html", "title": "libreoffice security, bug fix, and enhancement update", "type": "oraclelinux", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "redhat": [{"lastseen": "2019-08-13T18:45:42", "bulletinFamily": "unix", "cvelist": ["CVE-2014-0247", "CVE-2014-3575", "CVE-2014-3693"], "description": "LibreOffice is an open source, community-developed office productivity\nsuite. It includes key desktop applications, such as a word processor, a\nspreadsheet, a presentation manager, a formula editor, and a drawing\nprogram. LibreOffice replaces OpenOffice and provides a similar but\nenhanced and extended office suite.\n\nIt was found that LibreOffice documents executed macros unconditionally,\nwithout user approval, when these documents were opened using LibreOffice.\nAn attacker could use this flaw to execute arbitrary code as the user\nrunning LibreOffice by embedding malicious VBA scripts in the document as\nmacros. (CVE-2014-0247)\n\nA flaw was found in the OLE (Object Linking and Embedding) generation in\nLibreOffice. An attacker could use this flaw to embed malicious OLE code in\na LibreOffice document, allowing for arbitrary code execution.\n(CVE-2014-3575)\n\nA use-after-free flaw was found in the \"Remote Control\" capabilities of the\nLibreOffice Impress application. An attacker could use this flaw to\nremotely execute code with the permissions of the user running LibreOffice\nImpress. (CVE-2014-3693)\n\nThe libreoffice packages have been upgraded to upstream version 4.2.6.3,\nwhich provides a number of bug fixes and enhancements over the previous\nversion. Among others:\n\n* Improved OpenXML interoperability.\n\n* Additional statistic functions in Calc (for interoperability with Excel\nand Excel's Add-in \"Analysis ToolPak\").\n\n* Various performance improvements in Calc.\n\n* Apple Keynote and Abiword import.\n\n* Improved MathML export.\n\n* New Start screen with thumbnails of recently opened documents.\n\n* Visual clue in Slide Sorter when a slide has a transition or an\nanimation.\n\n* Improvements for trend lines in charts.\n\n* Support for BCP-47 language tags. (BZ#1119709)\n\nAll libreoffice users are advised to upgrade to these updated packages,\nwhich correct these issues and add these enhancements.", "modified": "2018-04-12T03:32:51", "published": "2015-03-05T10:43:01", "id": "RHSA-2015:0377", "href": "https://access.redhat.com/errata/RHSA-2015:0377", "type": "redhat", "title": "(RHSA-2015:0377) Moderate: libreoffice security, bug fix, and enhancement update", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "gentoo": [{"lastseen": "2016-09-06T19:46:15", "bulletinFamily": "unix", "cvelist": ["CVE-2012-0037", "CVE-2009-3302", "CVE-2012-2665", "CVE-2010-3450", "CVE-2009-3301", "CVE-2009-0217", "CVE-2009-0200", "CVE-2009-2949", "CVE-2012-2149", "CVE-2011-2713", "CVE-2006-4339", "CVE-2010-3689", "CVE-2010-4253", "CVE-2012-2334", "CVE-2010-2935", "CVE-2010-3451", "CVE-2010-0395", "CVE-2009-2950", "CVE-2010-3454", "CVE-2010-4643", "CVE-2010-3453", "CVE-2014-0247", "CVE-2010-2936", "CVE-2009-0201", "CVE-2012-1149", "CVE-2010-3452"], "description": "### Background\n\nOpenOffice is the open source version of StarOffice, a full office productivity suite. LibreOffice is a fork of OpenOffice. \n\n### Description\n\nMultiple vulnerabilities have been discovered in OpenOffice and Libreoffice. Please review the CVE identifiers referenced below for details. \n\n### Impact\n\nA remote attacker could entice a user to open a specially crafted file using OpenOffice, possibly resulting in execution of arbitrary code with the privileges of the process, a Denial of Service condition, execution of arbitrary Python code, authentication bypass, or reading and writing of arbitrary files. \n\n### Workaround\n\nThere is no known workaround at this time.\n\n### Resolution\n\nAll OpenOffice (binary) users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose\n \">=app-office/openoffice-bin-3.5.5.3\"\n \n\nAll LibreOffice users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose \">=app-office/libreoffice-4.2.5.2\"\n \n\nAll LibreOffice (binary) users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose\n \">=app-office/libreoffice-bin-4.2.5.2\"\n \n\nWe recommend that users unmerge OpenOffice:\n \n \n # emerge --unmerge \"app-office/openoffice\"", "edition": 1, "modified": "2014-08-31T00:00:00", "published": "2014-08-31T00:00:00", "id": "GLSA-201408-19", "href": "https://security.gentoo.org/glsa/201408-19", "type": "gentoo", "title": "OpenOffice, LibreOffice: Multiple vulnerabilities", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}]}