CVE-2008-3437

OpenOffice.org before 2.1.0 does not properly verify the authenticity of updates, allowing man-in-the-middle attackers to execute arbitrary code via a Trojan horse update. Affected: OOo up to 2.0.x; root cause is failing update verification. Impact: arbitrary code execution through malicious upda...

CVE-2008-3437

OpenOffice.org OOo before 2.1.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

GLSA-200807-05 : OpenOffice.org: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200807-05 OpenOffice.org: User-assisted execution of arbitrary code Sean Larsson iDefense Labs reported an integer overflow in the function rtlallocateMemory in the file sal/rtl/source/allocglobal.c. Impact : A remote attacker cou...

OpenOffice.org: User-assisted execution of arbitrary code

Background OpenOffice.org is an open source office productivity suite, including word processing, spreadsheet, presentation, drawing, data charting, formula editing, and file conversion facilities. Description Sean Larsson iDefense Labs reported an integer overflow in the function rtlallocateMemo...

openoffice.org2 security update

CentOS Errata and Security Advisory CESA-2008:0537 Updated openoffice.org packages to correct a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team...

CVE-2008-2366

Untrusted search path vulnerability in a certain Red Hat build script for OpenOffice.org OOo 1.1.x on Red Hat Enterprise Linux RHEL 3 and 4 allows local users to gain privileges via a malicious library in the current working directory, related to incorrect quoting of the ORIGIN symbol for use in...

Design/Logic Flaw

Untrusted search path vulnerability in a certain Red Hat build script for OpenOffice.org OOo 1.1.x on Red Hat Enterprise Linux RHEL 3 and 4 allows local users to gain privileges via a malicious library in the current working directory, related to incorrect quoting of the ORIGIN symbol for use in...

CVE-2008-2366

Untrusted search path vulnerability in a certain Red Hat build script for OpenOffice.org OOo 1.1.x on Red Hat Enterprise Linux RHEL 3 and 4 allows local users to gain privileges via a malicious library in the current working directory, related to incorrect quoting of the ORIGIN symbol for use in...

CVE-2008-2366

OpenOffice.org on Red Hat Enterprise Linux 3/4 is affected by CVE-2008-2366 due to an insecure relative RPATH in the OpenOffice memory allocator path, allowing local privilege escalation via a malicious library in the user’s current working directory. The issue is documented in Red Hat RHSA-2008:...

RHEL 3 / 4 : openoffice.org (RHSA-2008:0538)

Updated openoffice.org packages to correct two security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop...

CentOS 3 / 4 : openoffice.org (CESA-2008:0538)

Updated openoffice.org packages to correct two security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop...

RHEL 4 / 5 : openoffice.org (RHSA-2008:0537)

Updated openoffice.org packages to correct a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that...

openoffice.org: insecure relative RPATH in OOo 1.1.x packages

Untrusted search path vulnerability in a certain Red Hat build script for OpenOffice.org OOo 1.1.x on Red Hat Enterprise Linux RHEL 3 and 4 allows local users to gain privileges via a malicious library in the current working directory, related to incorrect quoting of the ORIGIN symbol for use in...

Important: Red Hat Security Advisory: openoffice.org security update

Updated openoffice.org packages to correct a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that...

OpenOffice.org overflow possible on allocation

Integer overflow in the rtlallocateMemory function in sal/rtl/source/allocglobal.c in OpenOffice.org OOo 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow...

openoffice.org security update

1.1.5-10.0.5 - Resolves: rhbz450521 CVE-2008-2366 1.1.5-10.0.4 - Resolves: rhbz450521 CVE-2008-2152...

Fedora 7 : openoffice.org-2.3.0-6.9.fc7 (2008-5239)

Resolves CVE-2008-2152, a potential overflow in allocating memory Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 8 : openoffice.org-2.3.0-6.15.fc8 (2008-5247)

Resolves CVE-2008-2152, a potential overflow in allocating memory Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[SECURITY] Fedora 7 Update: openoffice.org-2.3.0-6.9.fc7

OpenOffice.org is an Open Source, community-developed, multi-platform office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office...

Integer overflow

Integer overflow in the rtlallocateMemory function in sal/rtl/source/allocglobal.c in OpenOffice.org OOo 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow...