ooo-garant.su XSS vulnerability

Vulnerable URL: http://ooo-garant.su/voteresults?a=0=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E=...

CVE-2013-4156

Apache OpenOffice.org OOo before 4.0 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted element in an OOXML document file...

CVE-2013-2189

Apache OpenOffice.org/OpenOffice (OOo) versions prior to 4.0 are affected by CVE-2013-2189. The vulnerability arises from processing PLCF data in DOC files, leading to memory corruption and a potential denial of service (and possibly unspecified impact). Remediation is to upgrade to OpenOffice 4....

CVE-2013-4156

CVE-2013-4156 affects Apache OpenOffice.org prior to 4.0, where a crafted OOXML document element can trigger memory corruption, enabling remote denial of service (and possibly other impact). The provided connected docs reference LibreOffice/OpenOffice patches but do not specify a confirmed OpenOf...

Out-of-bounds

Multiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in OpenOffice.org OOo 2.x and 3.x before 3.3 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via crafted typography information in a Microsoft Word .DOC fi...

CVE-2010-3451

CVE-2010-3451 is a use-after-free vulnerability in OpenOffice.org’s oowriter (OOo) 2.x and 3.x up to before 3.3. It allows remote attackers to crash the application or potentially execute arbitrary code via malformed tables in an RTF document. The issue arises from insecure parsing of RTF tables,...

CVE-2010-3452

CVE-2010-3452 is a use-after-free in OpenOffice.org’s oowriter that can crash the application or, potentially, allow arbitrary code execution via crafted RTF tags. Affected: OpenOffice.org 2.x/3.x before 3.3. Remediation: apply vendor security updates; advisories from multiple vendors (openSUSE/S...

CVE-2010-3454

OpenOffice.org/OpenOffice.org2/3.x before 3.3 is affected by multiple off-by-one and out-of-bounds write flaws in WW8DopTypography::ReadFromMem (OOo), triggered by crafted Word .DOC typography data. This can cause denial of service or arbitrary code execution. Remediation: apply the patched/OpenO...

CVE-2010-4253

CVE-2010-4253 is confirmed in OpenOffice/OpenOffice Impress. The vulnerability is a heap-based buffer overflow in Impress of OpenOffice.org 2.x and 3.x (before 3.3) triggered by a crafted PNG inside an ODF or Microsoft Office document (e.g., PowerPoint), leading to a remote crash or possible arbi...

CVE-2010-3453

The WW8ListManager::WW8ListManager function in oowriter in OpenOffice.org OOo 2.x and 3.x before 3.3 does not properly handle an unspecified number of list levels in user-defined list styles in WW8 data in a Microsoft Word document, which allows remote attackers to cause a denial of service...

SuSE 10 Security Update : OpenOffice_org (ZYPP Patch Number 6884)

This update of OpenOfficeorg includes fixes for the following vulnerabilities : - XML signature weakness CVE-2009-2949: XPM Import Integer Overflow CVE-2009-2950: GIF Import Heap Overflow CVE-2009-3301: MS Word sprmTDefTable Memory Corruption CVE-2009-3302: MS Word sprmTDefTable Memory Corruption...

SuSE 10 Security Update : OpenOffice_org (ZYPP Patch Number 6883)

This update of OpenOfficeorg includes fixes for the following vulnerabilities : - XML signature weakness CVE-2009-2949: XPM Import Integer Overflow CVE-2009-2950: GIF Import Heap Overflow CVE-2009-3301: MS Word sprmTDefTable Memory Corruption CVE-2009-3302: MS Word sprmTDefTable Memory Corruption...

CVE-2010-2935

CVE-2010-2935 and CVE-2010-2936 affect OpenOffice.org Impress (simpress.bin) on OpenOffice.org 2.x/3.x up to 3.3. The issues arise from integer truncation and related heap-based buffer overflow when processing dictionary properties and polygons in PowerPoint documents, enabling denial of service ...

Fedora 11 : openoffice.org-3.1.1-19.12.fc11 (2010-1941)

Fri Feb 12 2010 Caolan McNamara - 1:3.1.1-19.12 - CVE-2009-2950 GIF file parsing heap overflow caolanm - CVE-2009-2949 integer overflow in XPM processing caolanm - CVE-2009-3301 .doc Table Parsing vulernability caolanm - CVE-2009-3302 .doc Table Parsing vulernability caolanm - Resolves:...

Fedora 12 : openoffice.org-3.1.1-19.26.fc12 (2010-1847)

Fri Feb 12 2010 Caolan McNamara - 1:3.1.1-19.26 - CVE-2009-2950 GIF file parsing heap overflow caolanm - CVE-2009-2949 integer overflow in XPM processing caolanm - CVE-2009-3301 .doc Table Parsing vulernability caolanm - CVE-2009-3302 .doc Table Parsing vulernability caolanm - Resolves:...

SuSE Update for OpenOffice_org SUSE-SA:2010:017

Check for the Version of OpenOfficeorg OpenVAS Vulnerability Test SuSE Update for OpenOfficeorg SUSE-SA:2010:017 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

openSUSE Security Update : OpenOffice_org-base-drivers-postgresql (OpenOffice_org-base-drivers-postgresql-1981)

This update of OpenOfficeorg includes fixes for the following vulnerabilities : - CVE-2009-0217: XML signature weakness - CVE-2009-2949: XPM Import Integer Overflow - CVE-2009-2950: GIF Import Heap Overflow - CVE-2009-3301: MS Word sprmTDefTable Memory Corruption - CVE-2009-3302: MS Word...

openSUSE Security Update : OpenOffice_org-base-drivers-postgresql (OpenOffice_org-base-drivers-postgresql-1980)

This update of OpenOfficeorg includes fixes for the following vulnerabilities : - CVE-2009-0217: XML signature weakness - CVE-2009-2949: XPM Import Integer Overflow - CVE-2009-2950: GIF Import Heap Overflow - CVE-2009-3301: MS Word sprmTDefTable Memory Corruption - CVE-2009-3302: MS Word...

CVE-2010-0136

CVE-2010-0136 affects OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 where VBA macro security settings are not properly enforced, enabling remote attackers to execute arbitrary macros via crafted documents. The issue stems from insufficient enforcement of VBA macro security in the ooo-build/OpenOff...

CVE-2009-3302

Summary (CVE-2009-3302) OpenOffice.org (OOo) Word import processing has a boundary error in sprmTSetBrc that can cause memory corruption. This vulnerability could allow a remote attacker to crash the application or potentially execute arbitrary code when processing crafted Word documents. The iss...