High risk vulnerability in OpenOffice RTF parser

John Heasman of NGSSoftware has discovered a high risk vulnerability in the handling of RTF documents within OpenOffice. The vulnerability affects all versions of OpenOffice prior to 2.2.1. If an attacker can coax a user into opening a specially crafted RTF document then the attacker can execute...

Important: openoffice.org security update

1.1.5-10.0.1 - Resolves: rhbz242007 CVE-2007-0245 rtf prtdata fix...

Heap overflow

Heap-based buffer overflow in OpenOffice.org OOo 2.2.1 and earlier allows remote attackers to execute arbitrary code via a RTF file with a crafted prtdata tag with a length parameter inconsistency, which causes vtable entries to be overwritten...

OpenOffice Version Information

Binary data 4069.prm...

OpenOffice Writer DoS

Crash on .otp files parocessing...

OpenOffice 2.2 Writer Component - Remote Denial of Service

OpenOffice 2.2 Writer Component - Remote Denial of Service source: https://www.securityfocus.com/bid/24186/info The OpenOffice 'Writer' component is prone to a remote denial-of-service vulnerability. Successful exploits may allow remote attackers to cause denial-of-service conditions on the...

OpenOffice 2.2 Writer Component - Remote Denial of Service

source: https://www.securityfocus.com/bid/24186/info The OpenOffice 'Writer' component is prone to a remote denial-of-service vulnerability. Successful exploits may allow remote attackers to cause denial-of-service conditions on the webserver running the affected application. OpenOffice 2.2.0 is...

Multiple OpenOffice security vulnerabilities

Shell characters problem on document open, code execution...

High Risk Vulnerability in OpenOffice

John Heasman of NGSSoftware has discovered a high risk vulnerability in the handling of StarCalc documents within OpenOffice. The vulnerability affects all versions of OpenOffice prior to 2.2. If an attacker can coax a user into opening a specially crafted StarCalc document then the attacker can...

OpenOffice StarCalc解析器未明缓冲区溢出漏洞

OpenOffice是一款开放源代码的文字处理程序。 OpenOffice StarCalc解析器存在缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 目前没有详细漏洞细节提供。 S.u.S.E. SUSE Linux Enterprise Desktop 10 S.u.S.E. SLE SDK 10 S.u.S.E. openSUSE 10.2 S.u.S.E. Novell Linux Desktop 9 S.u.S.E. Linux Desktop 1.0 S.u.S.E. Linux 9.3 x86 S.u.S.E. Linux 10.1 x86-64...

security flaw

Stack-based buffer overflow in filter\starcalc\scflt.cxx in the StarCalc parser in OpenOffice.org OOo Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to execute arbitrary code via a document with a long Note...

security flaw

OpenOffice.org OOo Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document...

security flaw

OpenOffice.org OOo Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document...

Stack overflow

Stack-based buffer overflow in filter\starcalc\scflt.cxx in the StarCalc parser in OpenOffice.org OOo Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to execute arbitrary code via a document with a long Note...

CVE-2007-0238

Stack-based buffer overflow in filter\starcalc\scflt.cxx in the StarCalc parser in OpenOffice.org OOo Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to execute arbitrary code via a document with a long Note...

CVE-2007-0238

CVE-2007-0238 describes a stack-based buffer overflow in the StarCalc parser of OpenOffice.org, specifically in filter\starcalc\scflt.cxx. The flaw is triggered by a crafted StarCalc/Note with excessive length, enabling a user-assisted remote attacker to execute arbitrary code on vulnerable hosts...

CVE-2007-0239

The connected Nessus/RHSA entries for CVE-2007-0239 (OpenOffice.org) reference concrete issues: (1) integer overflow in libwpd used by OpenOffice.org, (2) stack overflow in StarCalc parser, and (3) hyperlink handling flaws that could execute commands when opening malicious files. Red Hat/Oracle L...

Mandrake Linux Security Advisory : libwpd (MDKSA-2007:063)

iDefense reported several overflow bugs in libwpd. An attacker could create a carefully crafted Word Perfect file that could cause an application linked with libwpd, such as OpenOffice, to crash or possibly execute arbitrary code if the file was opened by a victim. Updated packages have been...

libwpd /OpenOffice / AbiWord multiple security vulnerabilities

Multiple buffer overflows on Word Perfect documents parsing...

Critical: thunderbird security update

1.5.0.10-0.1.el4.0.1 - defaults changed to oracle. 1.5.0.10-0.1.el4 - Update to 1.5.0.10 1.5.0.9-0.2.el4 - Fix langpack support to start in the user's locale where possible - Allow OpenOffice to send files as Thunderbird attachments...