311 matches found
Apache OpenOffice Text Document Malicious Macro Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex/zip' require 'cgi' class MetasploitModule "Apache OpenOffice Text Document Malicious Macro Execution", 'Description' = %q This module...
Apache OpenOffice Text Document Malicious Macro Execution
This module generates an Apache OpenOffice Text Document with a malicious macro in it. To exploit successfully, the targeted user must adjust the security level in Macro Security to either Medium or Low. If set to Medium, a prompt is presented to the user to enable or disable the macro. If set to...
Apache OpenOffice 1.0 Windows Installer Trojan Execution Vulnerability
The Apache OpenOffice installer for Windows contained a defective operation that could trigger execution of unwanted software installed by a Trojan Horse application. The installer defect is known as an unquoted Windows search path vulnerability. In the case of Apache OpenOffice installers for...
Apache OpenOffice 4.1.2 Privilege Escalation Vulnerability
Exploit for multiple platform in category local exploits CVE-2016-6804 Apache OpenOffice Advisory Title: Windows Installer Execution of Arbitrary Code with Elevated Privileges Version 1.0 Announced October 11, 2016 Description The Apache OpenOffice installer for Windows contained a defective...
Apache OpenOffice < 4.1.3 Multiple Vulnerabilities
The version of Apache OpenOffice installed on the remote host is a version prior to 4.1.3. It is, therefore, affected by the following vulnerabilities : - A memory corruption issue exists in the Impress tool due to improper validation of user-supplied input when handling elements in invalid...
Apache OpenOffice -- multiple vulnerabilities
The Apache Openofffice project reports: CVE-2017-3157: Arbitrary file disclosure in Calc and Writer By exploiting the way OpenOffice renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrieved by the attacke...
Apache OpenOffice 'Impress Tool' Denial of Service Vulnerability - Windows
Apache OpenOffice is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Out-of-bounds
The Impress tool in Apache OpenOffice 4.1.2 and earlier allows remote attackers to cause a denial of service out-of-bounds read or write or execute arbitrary code via crafted MetaActions in an 1 ODP or 2 OTP file...
CVE-2016-1513
The Impress tool in Apache OpenOffice 4.1.2 and earlier allows remote attackers to cause a denial of service out-of-bounds read or write or execute arbitrary code via crafted MetaActions in an 1 ODP or 2 OTP file...
CVE-2016-1513
The Impress tool in Apache OpenOffice 4.1.2 and earlier allows remote attackers to cause a denial of service out-of-bounds read or write or execute arbitrary code via crafted MetaActions in an 1 ODP or 2 OTP file...
CVE-2016-1513
The CVE-2016-1513 issue affects Apache OpenOffice Impress (4.1.2 and earlier). It arises from improper handling of MetaActions in OpenDocument (.odp) and Presentation Template (.otp) files, causing an out-of-bounds read/write that can lead to denial of service or arbitrary code execution. The vul...
CVE-2016-1513
The Impress tool in Apache OpenOffice 4.1.2 and earlier allows remote attackers to cause a denial of service out-of-bounds read or write or execute arbitrary code via crafted MetaActions in an 1 ODP or 2 OTP file...
CVE-2016-1513
The Impress tool in Apache OpenOffice 4.1.2 and earlier allows remote attackers to cause a denial of service out-of-bounds read or write or execute arbitrary code via crafted MetaActions in an 1 ODP or 2 OTP file...
FreeBSD : Apache OpenOffice 4.1.2 -- Memory Corruption Vulnerability (Impress Presentations) (72f71e26-4f69-11e6-ac37-ac9e174be3af)
The Apache OpenOffice Project reports : An OpenDocument Presentation .ODP or Presentation Template .OTP file can contain invalid presentation elements that lead to memory corruption when the document is loaded in Apache OpenOffice Impress. The defect may cause the document to appear as corrupted...
KLA10855 Memory corruption vulnerability in Apache OpenOffice
An unspecified vulnerability was found in Apache OpenOffice Impress. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed .ODP and .OTP files. Technical details An exploitable...
Apache OpenOffice 4.1.2 -- Memory Corruption Vulnerability (Impress Presentations)
The Apache OpenOffice Project reports: An OpenDocument Presentation .ODP or Presentation Template .OTP file can contain invalid presentation elements that lead to memory corruption when the document is loaded in Apache OpenOffice Impress. The defect may cause the document to appear as corrupted a...
The vulnerabilities of Debian GNU/Linux operating systems, Ubuntu, office software packages such as LibreOffice and Apache OpenOffice, allow attackers to trigger service failures or execute arbitrary code.
The vulnerability of the Debian GNU/Linux operating system, Ubuntu, and the office software packages LibreOffice and Apache OpenOffice is due to buffer overflow attacks. Exploiting this vulnerability allows an attacker to cause service failures or execute arbitrary code by accessing an nonexisten...
The vulnerabilities of Debian GNU/Linux operating systems, Ubuntu, office software packages such as LibreOffice and Apache OpenOffice, allow attackers to trigger service failures or execute arbitrary code.
The vulnerability of Debian GNU/Linux operating systems, Ubuntu, office software packages like LibreOffice and Apache OpenOffice is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to cause service failures or execute arbitrary code using a long DOC...
Apache OpenOffice < 4.1.2 Multiple Vulnerabilities
The version of Apache OpenOffice installed on the remote host is a version prior to 4.1.2. It is, therefore, affected by the following vulnerabilities : - An overflow condition exists in the Hangul Word Processor HWP filter due to improper validation of user-supplied input. A remote attacker can...
