RHEL 4 / 5 : openoffice.org (RHSA-2008:0175)

Updated openoffice.org 2.x packages to correct multiple security issues are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity...

Debian Security Advisory DSA 1547-1 (openoffice.org)

The remote host is missing an update to openoffice.org announced via advisory DSA 1547-1. OpenVAS Vulnerability Test $Id: deb15471.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1547-1 openoffice.org Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...

iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice OLE DocumentSummaryInformation Heap Overflow Vulnerability

iDefense Security Advisory 04.17.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 17, 2008 I. BACKGROUND OpenOffice is an open-source desktop office suite for many of today's popular operating systems. Object Linking and Embedding OLE is a proprietary binary file format developed by...

Debian DSA-1547-1 : openoffice.org - several vulnerabilities

Several security related problems have been discovered in OpenOffice.org, the free office suite. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5745, CVE-2007-5747 Several bugs have been discovered in the way OpenOffice.org parses Quattro Pro files...

CVE-2008-0320

Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream...

Heap overflow

Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream...

CVE-2008-0320

Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream...

CVE-2008-0320

Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream...

CVE-2008-0320

OpenOffice.org is affected by a heap-based buffer overflow in the OLE importer, exploitable via a crafted DocumentSummaryInformation stream in OLE files. The vulnerability exists in OpenOffice.org versions prior to 2.4 and can cause a crash (DoS) and may allow arbitrary code execution under the u...

Important: Red Hat Security Advisory: openoffice.org security update

Updated openoffice.org 2.x packages to correct multiple security issues are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity...

openoffice.org: OLE files parsing heap overflows

Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream...

openoffice.org: OLE files parsing heap overflows

Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream...

OpenOffice < 2.4 Multiple Vulnerabilities

Binary data 4474.prm...

OpenOffice OLE Importer DocumentSummaryInformation Stream Handling Overflow

This module exploits a vulnerability in OpenOffice 2.3.1 and 2.3.0 on Microsoft Windows XP SP3. By supplying a OLE file with a malformed DocumentSummaryInformation stream, an attacker can gain control of the execution flow, which results arbitrary code execution under the context of the user...

CVE-2008-0320: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream...

Sun OpenOffice.org < 2.4 Multiple Vulnerabilities

The version of Sun Microsystems OpenOffice.org installed on the remote host is affected by several issues : - Heap overflow and arbitrary code execution vulnerabilities involving ODF text documents with XForms CVE-2007-4770/4771. - Heap overflow and arbitrary code execution vulnerabilities...

Microsoft Office Web Components OWC.Spreadsheet.9 ActiveX Control overflow

Added: 03/12/2008 CVE: CVE-2006-4695 BID: 28135 OSVDB: 42711 Background Microsoft Office Web Components OWC are a group of OLE classes implemented as ActiveX controls. Problem A buffer overflow vulnerability in the OWC.Spreadsheet.9 ActiveX control allows command execution when a user loads a web...

Microsoft Windows OLE自动化堆溢出漏洞（MS08-008）

BUGTRAQ ID: 27661 CVECAN ID: CVE-2007-0065 Microsoft Windows是微软发布的非常流行的操作系统。 对象链接和嵌入（OLE）自动化处理特制脚本请求的方式存在堆溢出漏洞，如果用户受骗访问了恶意站点的话，就可能触发这个溢出，导致以登录用户的权限对系统进行更改。如果用户以管理权限登录的话，攻击者就可以完全控制受影响的系统。 Microsoft Office 2004 for Mac Microsoft Visual Basic 6.0 SP6 Microsoft Windows XP SP2 Microsoft Windows Vista...

iDefense Security Advisory 02.12.08: Microsoft Office Works Converter Heap Overflow Vulnerability

iDefense Security Advisory 02.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 12, 2008 I. BACKGROUND Microsoft Works is a word processor created by Microsoft in the 1980s. Microsoft Office, a widely use productivity suite, is distributed with converters for various versions of th...

CVE-2007-0065

Heap-based buffer overflow in Object Linking and Embedding OLE Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual basic 6.0 SP6 allows remote attackers to execute arbitrary code via a crafted script request...