openoffice -- document disclosure

The remote host is missing an update to the system as announced in the referenced advisory. VID c62dc69f-05c8-11d9-b45d-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

openoffice -- DOC document heap overflow vulnerability

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

OpenOffice < 3.2.0 'rtl_allocateMemory()' RCE Vulnerability - Windows

OpenOffice.Org is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-3282

CVE-2008-3282 : A numeric truncation error in the OpenOffice.org memory allocator (rtl_allocateMemory) used by OpenOffice.org on 64-bit platforms can cause a crash or potentially allow code execution when a crafted file is opened. Public advisories describe this in OpenOffice.org updates; success...

OpenOffice 'rtl_allocateMemory()'远程代码执行漏洞

BUGTRAQ ID: 30866 CVE ID: CVE-2008-3282 CNCVE ID：CNCVE-20083282 OpenOffice是一款开源的办公文字处理应用程序。 OpenOffice内存分配中存在一个数字截断错误，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 sal/rtl/source/allocglobal.c中的rtlallocateMemory函数接受salSize n参数，在64位平台如x8664上，salsize定义为无符号长整数，请求的内存块大小之后以size type...

OpenOffice OLE importer DocumentSummaryInformation buffer overflow

Added: 06/20/2008 CVE: CVE-2008-0320 BID: 28819 OSVDB: 44472 Background OpenOffice is a free productivity suite for multiple platforms. OpenOffice includes an importer for Microsoft's Object Linking and Embedding OLE framework. Problem A buffer overflow vulnerability in the OLE importer allows...

OpenOffice OLE importer DocumentSummaryInformation buffer overflow

Added: 06/20/2008 CVE: CVE-2008-0320 BID: 28819 OSVDB: 44472 Background OpenOffice is a free productivity suite for multiple platforms. OpenOffice includes an importer for Microsoft's Object Linking and Embedding OLE framework. Problem A buffer overflow vulnerability in the OLE importer allows...

OpenOffice OLE importer DocumentSummaryInformation buffer overflow

Added: 06/20/2008 CVE: CVE-2008-0320 BID: 28819 OSVDB: 44472 Background OpenOffice is a free productivity suite for multiple platforms. OpenOffice includes an importer for Microsoft's Object Linking and Embedding OLE framework. Problem A buffer overflow vulnerability in the OLE importer allows...

OpenOffice OLE importer DocumentSummaryInformation buffer overflow

Added: 06/20/2008 CVE: CVE-2008-0320 BID: 28819 OSVDB: 44472 Background OpenOffice is a free productivity suite for multiple platforms. OpenOffice includes an importer for Microsoft's Object Linking and Embedding OLE framework. Problem A buffer overflow vulnerability in the OLE importer allows...

openoffice.org security update

CentOS Errata and Security Advisory CESA-2008:0538 Updated openoffice.org packages to correct two security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an offi...

OpenOffice rtl_allocateMemory()函数堆溢出漏洞

BUGTRAQ ID: 29622 CVECAN ID: CVE-2008-2152 OpenOffice是个整合性的软件，包含了许多文字处理、表格、公式等办公工具。 OpenOffice的rtlallocateMemory函数没有执行整数溢出检查便以8字节为边界环绕分配请求，以下是sal/rtl/source/allocglobal.c中的漏洞代码： 191 void 192 SALCALL rtlallocateMemory salSize n 193 194 void p = 0; 195 if n 0 196 197 char addr; 198 salSize size =...

OpenOffice.org overflow possible on allocation

Integer overflow in the rtlallocateMemory function in sal/rtl/source/allocglobal.c in OpenOffice.org OOo 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow...

Important: Red Hat Security Advisory: openoffice.org security update

Updated openoffice.org packages to correct two security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop...

Fedora 9 : openoffice.org-2.4.1-17.3.fc9 (2008-5143)

Update to upstream version 2.4.1 to fix a range of reported problems and a security issue CVE-2008-2152: http://www.openoffice.org/security/cves/CVE-2008-2152.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...

CVE-2008-2152

Integer overflow in the rtlallocateMemory function in sal/rtl/source/allocglobal.c in OpenOffice.org OOo 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow...

OpenOffice < 2.4.1 rtl_allocateMemory() Function Crafted Document Handling Integer Overflow

The version of OpenOffice installed on the remote host reportedly contains an integer overflow vulnerability in 'rtlallocateMemory', a custom memory allocation function used by the application. If an attacker can trick a user on the affected system, he can leverage this issue to execute arbitrary...

iDefense Security Advisory 06.10.08: Multiple Vendor OpenOffice rtl_allocateMemory&#40;&#41; Integer Overflow Vulnerability

iDefense Security Advisory 06.10.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 10, 2008 I. BACKGROUND OpenOffice is an open-source desktop office suite for many of today's popular operating systems. For more information, see the vendor's site found at the following URL...

OpenOffice integer overflow

Buffer overflow in rtlallocateMemory on different file formats parsing...

Fedora 8 : openoffice.org-2.3.0-6.14.fc8 (2008-3251)

Following security issues were addressed in this update: CVE-2007-5745/5747: Manipulated Quattro Pro files can lead to heap overflows and arbitrary code execution CVE-2007-5746: Manipulated EMF files can lead to heap overflows and arbitrary code execution CVE-2008-0320: Manipulated OLE files can...

RHEL 3 / 4 : openoffice.org (RHSA-2008:0176)

Updated openoffice.org 1.x packages to correct multiple security issues are now available for Red Hat Enterprise Linux 3 and Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity...