110 matches found
RHEL 3 / 4 : openoffice.org (RHSA-2006:0573)
Updated openoffice.org packages are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop applications such as a word processor, spreadsheet, presentation manager,...
Important: Red Hat Security Advisory: openoffice.org security update
Updated openoffice.org packages are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop applications such as a word processor, spreadsheet, presentation manager,...
CVE-2006-2198
CVE-2006-2198 affects OpenOffice.org/StarOffice from 1.1.x (up to 1.1.5) and 2.0.x before 2.0.3. A user‑supplied OpenOffice document containing a malicious BASIC macro can execute without prompting, enabling the macro to run with the current user’s privileges. This can lead to unauthorized activi...
[SECURITY] [DSA 1104-1] New OpenOffice.org packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1104-1 [email protected] http://www.debian.org/security/ Martin Schulze June 30th, 2006 http://www.debian.org/security/faq -...
DSA-1104 openoffice.org - several vulnerabilities
Bulletin has no description...
CVE-2002-2198
CVE-2002-2198 describes a buffer overflow in ZMailer prior to 2.99.51_1 that can be triggered during HELO processing from an IPv6 address, potentially allowing remote attackers to execute arbitrary code. The component affected is ZMailer; the root cause is a buffer overflow that occurs when handl...
CVE-2005-2198
SPiD (a PHP-based photo gallery) is affected by CVE-2005-2198 due to a remote file inclusion vulnerability in lang.php. The flaw allows an attacker to influence the lang_path parameter to include PHP code from an attacker-controlled location, enabling arbitrary code execution and potential disclo...
CVE-2004-2198
The CVE-2004-2198 entry relates to DUware DUclassmate 1.0–1.1, where an attacker can remotely change arbitrary user passwords by tampering with the MM_recordId parameter on the My Account page. The connected data also note related issues in DUware products (e.g., DUclassmate, DUclassified, DUforu...
