OpenOffice.org (OOo) before 2.1.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.
CPE | Name | Operator | Version |
---|---|---|---|
openoffice.org | eq | 2.0.4 | |
openoffice.org | eq | 2.0 | |
openoffice.org | eq | 2.0.2 | |
openoffice.org | eq | 2.0.3 | |
openoffice.org | eq | 1.1.5 |