Lucene search

K
osvGoogleOSV:DSA-1307-1
HistoryJun 12, 2007 - 12:00 a.m.

openoffice.org - heap overflow

2007-06-1200:00:00
Google
osv.dev
9

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

John Heasman discovered a heap overflow in the routines of OpenOffice.org
that parse RTF files. A specially crafted RTF file could cause the
filter to overwrite data on the heap, which may lead to the execution
of arbitrary code.

For the old stable distribution (sarge) this problem has been fixed in
version 1.1.3-9sarge7.

For the stable distribution (etch) this problem has been fixed in
version 2.0.4.dfsg.2-7etch1.

For the unstable distribution (sid) this problem has been fixed in
version 2.2.1~rc1-1.

We recommend that you upgrade your openoffice.org packages.

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C