980 matches found
openoffice -- document disclosure
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
openoffice -- document disclosure
The remote host is missing an update to the system as announced in the referenced advisory. VID c62dc69f-05c8-11d9-b45d-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
openoffice -- DOC document heap overflow vulnerability
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
openoffice -- DOC document heap overflow vulnerability
The remote host is missing an update to the system as announced in the referenced advisory. VID b206dd82-ac67-11d9-a788-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
OpenOffice < 3.2.0 'rtl_allocateMemory()' RCE Vulnerability - Windows
OpenOffice.Org is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-3282
CVE-2008-3282 : A numeric truncation error in the OpenOffice.org memory allocator (rtl_allocateMemory) used by OpenOffice.org on 64-bit platforms can cause a crash or potentially allow code execution when a crafted file is opened. Public advisories describe this in OpenOffice.org updates; success...
OpenOffice 'rtl_allocateMemory()'远程代码执行漏洞
BUGTRAQ ID: 30866 CVE ID: CVE-2008-3282 CNCVE ID：CNCVE-20083282 OpenOffice是一款开源的办公文字处理应用程序。 OpenOffice内存分配中存在一个数字截断错误，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 sal/rtl/source/allocglobal.c中的rtlallocateMemory函数接受salSize n参数，在64位平台如x8664上，salsize定义为无符号长整数，请求的内存块大小之后以size type...
OpenOffice OLE importer DocumentSummaryInformation buffer overflow
Added: 06/20/2008 CVE: CVE-2008-0320 BID: 28819 OSVDB: 44472 Background OpenOffice is a free productivity suite for multiple platforms. OpenOffice includes an importer for Microsoft's Object Linking and Embedding OLE framework. Problem A buffer overflow vulnerability in the OLE importer allows...
OpenOffice OLE importer DocumentSummaryInformation buffer overflow
Added: 06/20/2008 CVE: CVE-2008-0320 BID: 28819 OSVDB: 44472 Background OpenOffice is a free productivity suite for multiple platforms. OpenOffice includes an importer for Microsoft's Object Linking and Embedding OLE framework. Problem A buffer overflow vulnerability in the OLE importer allows...
OpenOffice OLE importer DocumentSummaryInformation buffer overflow
Added: 06/20/2008 CVE: CVE-2008-0320 BID: 28819 OSVDB: 44472 Background OpenOffice is a free productivity suite for multiple platforms. OpenOffice includes an importer for Microsoft's Object Linking and Embedding OLE framework. Problem A buffer overflow vulnerability in the OLE importer allows...
OpenOffice OLE importer DocumentSummaryInformation buffer overflow
Added: 06/20/2008 CVE: CVE-2008-0320 BID: 28819 OSVDB: 44472 Background OpenOffice is a free productivity suite for multiple platforms. OpenOffice includes an importer for Microsoft's Object Linking and Embedding OLE framework. Problem A buffer overflow vulnerability in the OLE importer allows...
openoffice.org security update
CentOS Errata and Security Advisory CESA-2008:0538 Updated openoffice.org packages to correct two security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an offi...
OpenOffice rtl_allocateMemory()函数堆溢出漏洞
BUGTRAQ ID: 29622 CVECAN ID: CVE-2008-2152 OpenOffice是个整合性的软件，包含了许多文字处理、表格、公式等办公工具。 OpenOffice的rtlallocateMemory函数没有执行整数溢出检查便以8字节为边界环绕分配请求，以下是sal/rtl/source/allocglobal.c中的漏洞代码： 191 void 192 SALCALL rtlallocateMemory salSize n 193 194 void p = 0; 195 if n 0 196 197 char addr; 198 salSize size =...
OpenOffice.org overflow possible on allocation
Integer overflow in the rtlallocateMemory function in sal/rtl/source/allocglobal.c in OpenOffice.org OOo 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow...
Important: Red Hat Security Advisory: openoffice.org security update
Updated openoffice.org packages to correct two security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop...
Fedora 9 : openoffice.org-2.4.1-17.3.fc9 (2008-5143)
Update to upstream version 2.4.1 to fix a range of reported problems and a security issue CVE-2008-2152: http://www.openoffice.org/security/cves/CVE-2008-2152.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...
CVE-2008-2152
Integer overflow in the rtlallocateMemory function in sal/rtl/source/allocglobal.c in OpenOffice.org OOo 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow...
OpenOffice < 2.4.1 rtl_allocateMemory() Function Crafted Document Handling Integer Overflow
The version of OpenOffice installed on the remote host reportedly contains an integer overflow vulnerability in 'rtlallocateMemory', a custom memory allocation function used by the application. If an attacker can trick a user on the affected system, he can leverage this issue to execute arbitrary...
iDefense Security Advisory 06.10.08: Multiple Vendor OpenOffice rtl_allocateMemory() Integer Overflow Vulnerability
iDefense Security Advisory 06.10.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 10, 2008 I. BACKGROUND OpenOffice is an open-source desktop office suite for many of today's popular operating systems. For more information, see the vendor's site found at the following URL...