CVE-2008-0238

The CVE-2008-0238 entry concerns xine-lib prior to 1.1.9 with heap-based overflows in rmff_dump_cont (input/libreal/rmff.c), related to rmff_dump_header, allowing remote code execution via SDP attributes (Title, Author, Copyright). This is one of two heap-overflow vectors for xine-lib (the other ...

SuSE 10 Security Update : OpenOffice_org (ZYPP Patch Number 2651)

Following security problems were fixed in OpenOfficeorg : This update also brings OpenOfficeorg to version 2.0.4.17, same as SUSE Linux Enterprise Desktop 10 and contains lots of bugfixes. It also contains support for the Office XML converter hooks. - Various problems were fixed in the Wordperfec...

Ubuntu 5.10 / 6.06 LTS / 6.10 : openoffice.org(2)/-amd64, ia32-libs-openoffice.org vulnerabilities (USN-444-1)

A stack overflow was discovered in OpenOffice.org's StarCalc parser. If a user were tricked into opening a specially crafted document, a remote attacker could execute arbitrary code with user privileges. CVE-2007-0238 A flaw was discovered in OpenOffice.org's link handling code. If a user were...

openSUSE 10 Security Update : OpenOffice_org (OpenOffice_org-2682)

Following security problems were fixed in OpenOfficeorg : This update also brings OpenOfficeorg to version 2.0.4.17, same as SUSE Linux Enterprise Desktop 10 and contains lots of bugfixes. CVE-2007-0002: Various problems were fixed in the Wordperfect converter library libwpd in OpenOfficeorg whic...

Fedora Core 6 : openoffice.org-2.0.4-5.5.17 (2007-376)

CVE-2007-0239 rhbz228008 potential shell escape problem in some hyperlinks CVE-2007-0238 rhbz226966 potential buffer overflows in calc legacy file format Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

High Risk Vulnerability in OpenOffice

John Heasman of NGSSoftware has discovered a high risk vulnerability in the handling of StarCalc documents within OpenOffice. The vulnerability affects all versions of OpenOffice prior to 2.2. If an attacker can coax a user into opening a specially crafted StarCalc document then the attacker can...

[SECURITY] [DSA 1270-2] New OpenOffice.org packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1270-2 [email protected] http://www.debian.org/security/ Martin Schulze March 28th, 2007 http://www.debian.org/security/faq -...

CentOS 3 / 4 : openoffice.org (CESA-2007:0033)

Updated openoffice.org packages to correct security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop application...

RHEL 3 / 4 : openoffice.org (RHSA-2007:0033)

Updated openoffice.org packages to correct security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop application...

openoffice.org security update

CentOS Errata and Security Advisory CESA-2007:0033 Updated openoffice.org packages to correct security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office...

Important: Red Hat Security Advisory: openoffice.org security update

Updated openoffice.org packages to correct security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop application...

CVE-2007-0238

CVE-2007-0238 describes a stack-based buffer overflow in the StarCalc parser of OpenOffice.org, specifically in filter\starcalc\scflt.cxx. The flaw is triggered by a crafted StarCalc/Note with excessive length, enabling a user-assisted remote attacker to execute arbitrary code on vulnerable hosts...

[SECURITY] [DSA 1270-1] New OpenOffice.org packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1270-1 [email protected] http://www.debian.org/security/ Martin Schulze March 20th, 2007 http://www.debian.org/security/faq -...

Solaris 5.9 (sparc) : 120185-19

StarOffice 8 Solaris: Update 14. Date this patch was last updated by Sun : Sep/09/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.10 (sparc) : 120185-19

StarOffice 8 Solaris: Update 14. Date this patch was last updated by Sun : Sep/09/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.10 (x86) : 120186-19

StarOffice 8 Solarisx86: Update 14. Date this patch was last updated by Sun : Sep/10/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.8 (sparc) : 120185-19

StarOffice 8 Solaris: Update 14. Date this patch was last updated by Sun : Sep/09/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.9 (sparc) : 120189-19

StarSuite 8 Solaris: Update 14. Date this patch was last updated by Sun : Sep/09/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

CVE-2006-0238

CVE-2006-0238 affects GaMerZ WP-Stats 2.0. The WP component wp-stats.php is vulnerable to SQL injection via the author parameter, allowing remote attackers to execute arbitrary SQL commands. No additional exploit details or remediation are provided in the connected documents.

CVE-2005-0238

CVE-2005-0238 concerns the International Domain Name (IDN) support in Epiphany, where punycode-encoded domain names decoded in URLs and SSL certificates can be interpreted using homograph characters from other scripts. This enables remote attackers to spoof legitimate domain names and facilitates...