(RHSA-2007:1090) Moderate: openoffice.org2 security update

2007-12-0500:00:00

access.redhat.com

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.024 Low

EPSS

Percentile

88.8%

JSON

OpenOffice.org is an office productivity suite.
HSQLDB is the default database engine shipped with OpenOffice.org 2.

It was discovered that HSQLDB could allow the execution of arbitrary public
static Java methods. A carefully crafted odb file opened in OpenOffice.org
Base could execute arbitrary commands with the permissions of the user
running OpenOffice.org. (CVE-2007-4575)

All users of OpenOffice.org are advised to upgrade to these updated
packages, which contain a backported patch to resolve this issue.

OSVersionArchitecturePackageVersionFilename
RedHatanyppcopenoffice.org2-langpack-fr< 2.0.4-5.7.0.3.0openoffice.org2-langpack-fr-2.0.4-5.7.0.3.0.ppc.rpm
RedHatanyi386openoffice.org2-langpack-zh_tw< 2.0.4-5.7.0.3.0openoffice.org2-langpack-zh_TW-2.0.4-5.7.0.3.0.i386.rpm
RedHatanyppcopenoffice.org2-langpack-af_za< 2.0.4-5.7.0.3.0openoffice.org2-langpack-af_ZA-2.0.4-5.7.0.3.0.ppc.rpm
RedHatanysrcopenoffice.org2< 2.0.4-5.7.0.3.0openoffice.org2-2.0.4-5.7.0.3.0.src.rpm
RedHatanyppcopenoffice.org2-langpack-bn< 2.0.4-5.7.0.3.0openoffice.org2-langpack-bn-2.0.4-5.7.0.3.0.ppc.rpm
RedHatanyi386openoffice.org2-langpack-bg_bg< 2.0.4-5.7.0.3.0openoffice.org2-langpack-bg_BG-2.0.4-5.7.0.3.0.i386.rpm
RedHatanyi386openoffice.org2-langpack-es< 2.0.4-5.7.0.3.0openoffice.org2-langpack-es-2.0.4-5.7.0.3.0.i386.rpm
RedHatanyi386openoffice.org2-langpack-nn_no< 2.0.4-5.7.0.3.0openoffice.org2-langpack-nn_NO-2.0.4-5.7.0.3.0.i386.rpm
RedHatanyppcopenoffice.org2-testtools< 2.0.4-5.7.0.3.0openoffice.org2-testtools-2.0.4-5.7.0.3.0.ppc.rpm
RedHatanyi386openoffice.org2-math< 2.0.4-5.7.0.3.0openoffice.org2-math-2.0.4-5.7.0.3.0.i386.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc	openoffice.org2-langpack-fr	< 2.0.4-5.7.0.3.0	openoffice.org2-langpack-fr-2.0.4-5.7.0.3.0.ppc.rpm
RedHat	any	i386	openoffice.org2-langpack-zh_tw	< 2.0.4-5.7.0.3.0	openoffice.org2-langpack-zh_TW-2.0.4-5.7.0.3.0.i386.rpm
RedHat	any	ppc	openoffice.org2-langpack-af_za	< 2.0.4-5.7.0.3.0	openoffice.org2-langpack-af_ZA-2.0.4-5.7.0.3.0.ppc.rpm
RedHat	any	src	openoffice.org2	< 2.0.4-5.7.0.3.0	openoffice.org2-2.0.4-5.7.0.3.0.src.rpm
RedHat	any	ppc	openoffice.org2-langpack-bn	< 2.0.4-5.7.0.3.0	openoffice.org2-langpack-bn-2.0.4-5.7.0.3.0.ppc.rpm
RedHat	any	i386	openoffice.org2-langpack-bg_bg	< 2.0.4-5.7.0.3.0	openoffice.org2-langpack-bg_BG-2.0.4-5.7.0.3.0.i386.rpm
RedHat	any	i386	openoffice.org2-langpack-es	< 2.0.4-5.7.0.3.0	openoffice.org2-langpack-es-2.0.4-5.7.0.3.0.i386.rpm
RedHat	any	i386	openoffice.org2-langpack-nn_no	< 2.0.4-5.7.0.3.0	openoffice.org2-langpack-nn_NO-2.0.4-5.7.0.3.0.i386.rpm
RedHat	any	ppc	openoffice.org2-testtools	< 2.0.4-5.7.0.3.0	openoffice.org2-testtools-2.0.4-5.7.0.3.0.ppc.rpm
RedHat	any	i386	openoffice.org2-math	< 2.0.4-5.7.0.3.0	openoffice.org2-math-2.0.4-5.7.0.3.0.i386.rpm