Microsoft Word Array Data Handling Buffer Overflow (MS07-024; CVE-2007-0035)

A buffer overflow vulnerability exists in the way Microsoft Word processes word documents. The vulnerability is the result of an infinite loop. A remote attacker can exploit this vulnerability by enticing the target user to open a crafted Word document, potentially causing arbitrary code to be...

Mandriva Update for openoffice.org MDVSA-2010:091 (openoffice.org)

Check for the Version of openoffice.org OpenVAS Vulnerability Test Mandriva Update for openoffice.org MDVSA-2010:091 openoffice.org Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Microsoft Windows 7 / Server 2008 R2 SMB Client Infinite Loop

This module exploits a denial of service flaw in the Microsoft Windows SMB client on Windows 7 and Windows Server 2008 R2. To trigger this bug, run this module as a service and forces a vulnerable client to access the IP of this system as an SMB server. This can be accomplished by embedding a UNC...

Mandriva Linux Security Advisory : openoffice.org (MDVSA-2010:056)

This update provides the OpenOffice.org 3.0 major version and holds the security fixes for the following issues : An integer underflow might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document leading to a heap-based buffer overflow...

FreeBSD : openoffice.org -- multiple vulnerabilities (c97d7a37-2233-11df-96dd-001b2134ef46)

OpenOffice.org Security Team reports : Fixed in OpenOffice.org 3.2 CVE-2006-4339: Potential vulnerability from 3rd party libxml2 libraries CVE-2009-0217: Potential vulnerability from 3rd party libxmlsec libraries CVE-2009-2493: OpenOffice.org 3 for Windows bundles a vulnerable version of MSVC...

Debian DSA-1995-1 : openoffice.org - several vulnerabilities

Several vulnerabilities have been discovered in the OpenOffice.org office suite. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-0136 It was discovered that macro security settings were insufficiently enforced for VBA macros. - CVE-2009-0217 It was...

OpenOffice Multiple Remote Code Execution Vulnerabilities - Feb10

This host has OpenOffice running which is prone to multiple remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbopenofficemultcodeexecvulnwinfeb10.nasl 5323 2017-02-17 08:49:23Z teissa $ OpenOffice Multiple Remote Code Execution Vulnerabilities - Feb10 Authors: Veerendra G...

OpenOffice Multiple Remote Code Execution Vulnerabilities (Feb 2010)

OpenOffice is prone to multiple remote code execution vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenOffice Zaps Six Security Bugs

OpenOffice.org has shipped a new version of the desktop productivity suite to patch six vulnerabilities that could expose users to malicious hacker attacks. The flaws fixed in OpenOffice.org 3.2 could be exploited via GIF, XPM files and Microsoft Word document processing, according to an advisory...

VUPEN Security Research - OpenOffice Word Document Processing Heap Overflow Vulnerabilities

VUPEN Security Research - OpenOffice.org Word Document Handling Heap Overflow Vulnerabilities http://www.vupen.com/english/research.php I. BACKGROUND --------------------- OpenOffice.org OO.o or OOo, commonly known as OpenOffice, is an open source software application suite available for a number...

Design/Logic Flaw

filter/ww8/ww8par2.cxx in OpenOffice.org OOo before 3.2 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted sprmTSetBrc table property modifier in a Word document, related to a "boundary error flaw."...

CVE-2009-3302

filter/ww8/ww8par2.cxx in OpenOffice.org OOo before 3.2 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted sprmTSetBrc table property modifier in a Word document, related to a "boundary error flaw."...

CVE-2009-3301

Integer underflow in filter/ww8/ww8par2.cxx in OpenOffice.org OOo before 3.2 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted sprmTDefTable table property modifier in a Word document...

Integer overflow

Integer underflow in filter/ww8/ww8par2.cxx in OpenOffice.org OOo before 3.2 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted sprmTDefTable table property modifier in a Word document...

CVE-2009-3301

CVE-2009-3301: OpenOffice.org before 3.2 is affected by an memory corruption in sprmTDefTable when parsing Word documents, caused by an underflow in a Word table property modifier. This can trigger a denial of service (crash) and potentially allow arbitrary code execution if a crafted Word docume...

CVE-2009-3302

Summary (CVE-2009-3302) OpenOffice.org (OOo) Word import processing has a boundary error in sprmTSetBrc that can cause memory corruption. This vulnerability could allow a remote attacker to crash the application or potentially execute arbitrary code when processing crafted Word documents. The iss...

CVE-2009-3301

Integer underflow in filter/ww8/ww8par2.cxx in OpenOffice.org OOo before 3.2 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted sprmTDefTable table property modifier in a Word document...

CVE-2009-3301

Integer underflow in filter/ww8/ww8par2.cxx in OpenOffice.org OOo before 3.2 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted sprmTDefTable table property modifier in a Word document...

CVE-2009-3302

filter/ww8/ww8par2.cxx in OpenOffice.org OOo before 3.2 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted sprmTSetBrc table property modifier in a Word document, related to a "boundary error flaw."...

CVE-2009-3302

filter/ww8/ww8par2.cxx in OpenOffice.org OOo before 3.2 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted sprmTSetBrc table property modifier in a Word document, related to a "boundary error flaw."...