FreeBSD : openoffice -- document disclosure (c62dc69f-05c8-11d9-b45d-000c41e2cdad)

OpenOffice creates a working directory in /tmp on startup, and uses this directory to temporarily store document content. However, the permissions of the created directory may allow other user on the system to read these files, potentially exposing information the user likely assumed was...

Mandriva Update for libwpd MDKSA-2007:063 (libwpd)

Check for the Version of libwpd OpenVAS Vulnerability Test Mandriva Update for libwpd MDKSA-2007:063 libwpd Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for hplip MDKSA-2007:201 (hplip)

Check for the Version of hplip OpenVAS Vulnerability Test Mandriva Update for hplip MDKSA-2007:201 hplip Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Ubuntu Update for openoffice.org(2)/-amd64 vulnerability USN-482-1

Ubuntu Update for Linux kernel vulnerabilities USN-482-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4821.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openoffice.org2/-amd64 vulnerability USN-482-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-482-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for openoffice.org2-base CESA-2008:0537 centos4 i386

Check for the Version of openoffice.org2-base OpenVAS Vulnerability Test CentOS Update for openoffice.org2-base CESA-2008:0537 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

OpenOffice Denial of Service Vulnerability (Linux)

The host has OpenOffice installed and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodopenofficedosvulnlin.nasl 5122 2017-01-27 12:16:00Z teissa $ OpenOffice Denial of Service Vulnerability Linux Authors: Chandan S Copyright: Copyright c 2009 SecPod,...

OpenOffice Denial of Service Vulnerability (Windows)

The host has OpenOffice installed and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodopenofficedosvulnwin.nasl 5122 2017-01-27 12:16:00Z teissa $ OpenOffice Denial of Service Vulnerability Windows Authors: Chandan S Copyright: Copyright c 2009 SecPod,...

OpenOffice Denial of Service Vulnerability - Windows

OpenOffice is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VulnCheck KEV: CVE-2009-0259

The Word processor in OpenOffice.org 1.1.2 through 1.1.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted 1 .doc, 2 .wri, or 3 .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008, as...

Ubuntu USN-677-2 (OpenOffice)

The remote host is missing an update to OpenOffice announced via advisory USN-677-2. Original advisory details: Multiple memory overflow flaws were discovered in OpenOffice.org's handling of WMF and EMF files. If a user were tricked into opening a specially crafted document, a remote attacker mig...

Gentoo Security Advisory GLSA 200812-13 (openoffice openoffice-bin)

The remote host is missing updates announced in advisory GLSA 200812-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD : openoffice -- arbitrary code execution vulnerabilities (842bafdd-be2f-11dd-a578-0030843d3802)

The OpenOffice Team reports : A security vulnerability with the way OpenOffice 2.x process WMF files may allow a remote unprivileged user who provides a StarOffice/StarSuite document that is opened by a local user to execute arbitrary commands on the system with the privileges of the user running...

OpenOffice senddoc Insecure Temporary File Creation Vulnerability - Windows

OpenOffice is prone to an insecure temporary file creation vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Arbitrary file deletion

senddoc in OpenOffice.org OOo 2.4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/log.obr. temporary file...

iDefense Security Advisory 10.31.08: OpenOffice EMF Record Parsing Multiple Integer Overflow Vulnerabilities

iDefense Security Advisory 10.29.08 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 29, 2008 I. BACKGROUND OpenOffice is an open-source office application that supports reading and writing a wide variety of file formats. For more information, see the vendor's site found at the followin...

OpenOffice integer overflow

Integer overflow on EMF files parsing...

[SECURITY] Fedora 9 Update: openoffice.org-2.4.2-18.1.fc9

OpenOffice.org is an Open Source, community-developed, multi-platform office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office...

OpenOffice WMF和EMF文件处理堆缓冲区溢出漏洞

BUGTRAQ ID: 31962 CVE ID：CVE-2008-2237 CVE-2008-2238 CNCVE ID：CNCVE-20082237 CNCVE-20082238 OpenOffice是一款开放源代码的文字处理程序。 OpenOffice处理WMF和EMF文件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 目前没有详细的漏洞细节提供。构建特殊的WMF和EMF文件可触发基于堆的溢出。 OpenOffice OpenOffice 2.4.1 OpenOffice OpenOffice 2.3.1 OpenOffice OpenOffice 2.3...

Integer overflow

Multiple integer overflows in OpenOffice.org OOo 2.x before 2.4.2 allow remote attackers to execute arbitrary code via crafted EMR records in an EMF file associated with a StarOffice/StarSuite document, which trigger a heap-based buffer overflow...