CVE-2009-0201

Heap-based buffer overflow in OpenOffice.org OOo before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via unspecified records in a crafted Word document, related to "table parsing."...

Heap overflow

Integer underflow in OpenOffice.org OOo before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer overflow...

CVE-2009-0200

Integer underflow in OpenOffice.org OOo before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer overflow...

CVE-2009-0200

Integer underflow in OpenOffice.org OOo before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer overflow...

CVE-2009-0201

Heap-based buffer overflow in OpenOffice.org OOo before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via unspecified records in a crafted Word document, related to "table parsing."...

CVE-2009-0201

OpenOffice.org (OOo) and StarOffice/StarSuite prior to versions around 3.1.1/7–9 are affected by a heap-based buffer overflow in the Word-document parsing path. The underlying cause is an integer underflow and a boundary/error in the way certain Word records are parsed, which could allow remote a...

CVE-2009-0201

Heap-based buffer overflow in OpenOffice.org OOo before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via unspecified records in a crafted Word document, related to "table parsing."...

CVE-2009-0200

CVE-2009-0200 affects OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, 9, where an integer underflow in parsing Word document records can cause a heap-based buffer overflow and allow remote code execution. The issue arises from how certain records in Word documents are parsed, per...

Secunia Research: OpenOffice.org Word Document Table Parsing Integer Underflow

====================================================================== Secunia Research 01/09/2009 - OpenOffice.org Word Document Table Parsing Integer Underflow - ====================================================================== Table of Contents Affected...

Vulnerable MSVC++ runtime distributed with OpenOffice.org 3.1.1 for Windows

The just released latest version of OpenOffice.org 3.1.1 for Windows distributes once again a completely outdated and vulnerable MSVC++ runtime. The unpacked installation archive contains in subdirectory REDIST the installer of the "Microsoft Visual C++ 2008 Redistributable", VCRedistx86.exe, tim...

Secunia Research: OpenOffice.org Word Document Table Parsing Integer Underflow

====================================================================== Secunia Research 01/09/2009 - OpenOffice.org Word Document Table Parsing Integer Underflow - ====================================================================== Table of Contents Affected...

Secunia Research: OpenOffice.org Word Document Table Parsing Buffer Overflow

====================================================================== Secunia Research 01/09/2009 - OpenOffice.org Word Document Table Parsing Buffer Overflow - ====================================================================== Table of Contents Affected...

MDVA-2008:106-1 : openoffice.org-voikko

openoffice.org-voikko provides Finnish spellchecker and hyphenator component for OpenOffice.org. The package is being updated for the new OpenOffice.org version. Update: Due to a build error, the previous update for i586 architecture was built against the old OpenOffice.org. This update fixes tha...

Mandriva Linux Security Advisory : openoffice.org (MDVSA-2008:095)

A vulnerability in HSQLDB before 1.8.0.9 in OpenOffice.org could allow user-assisted remote attackers to execute arbitrary Java code via crafted database documents CVE-2007-4575. A heap overflow was discovered in OpenOffice.org's EMF parser. An attacker could create a carefully crafted EMF file...

Mandriva Linux Security Advisory : openoffice.org (MDVSA-2008:138)

Integer overflow in the rtlallocateMemory function in sal/rtl/source/allocglobal.c in OpenOffice.org OOo 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow. The updated packages have been patched to fix the issue...

Mandriva Linux Security Advisory : openoffice.org (MDVSA-2009:070)

senddoc uses temporary files /tmp/log.obr.4043 in a insecure way which enables local attackers to overwrite arbitrary files by using a symlink attack CVE-2008-4937. This update provides fix for that vulnerability. Update : Further this update is a rebuild against lastest xulrunner 1.9.0.6...

Mandriva Linux Security Advisory : openoffice.org (MDVSA-2008:137)

Integer overflow in the rtlallocateMemory function in sal/rtl/source/allocglobal.c in OpenOffice.org OOo 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow. CVE-2008-2152 Also, according to bug 38874 decimal numbers on...

MDVA-2009:005 : x11-server

This updated x11-server-xorg package provides the following fixes: The OpenOffice.org application menu would trigger a bug in the X server's xkb cache code causing it to crash segfault. Fake key events generated by the XTest extension would not change the state of the keyboard leds. This would...

MDVA-2008:106 : openoffice.org-voikko

openoffice.org-voikko provides Finnish spellchecker and hyphenator component for OpenOffice.org. The package is being updated for the new OpenOffice.org version. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

MDVA-2008:162 : openoffice.org

This update provides a new upstream version of OpenOffice.org - 2.4.1.10. It also corrects the following bugs: Under 2.4 versions of OpenOffice.org, the Orientation option was removed from printer properties which prevented users from printing on a booklet format in a way they were used to do. Th...