OpenOffice HSQLDB数据库引擎未明JAVA代码执行漏洞

OpenOffice是一款开放冤代码的办公应用软件。 OpenOffice的第三方模块HSQLDB数据库引擎默认安装存在未明安全问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意Java代码。 目前没有详细漏洞细节提供。 RedHat Enterprise Linux Optional Productivity Application v.5 server RedHat Enterprise Linux Desktop v.5 client RedHat Enterprise Linux WS 4 RedHat Enterprise Linux ES 4 RedHat...

Immunity Canvas: OOO_230

Name| ooo230 ---|--- CVE| CVE-2007-4575 Exploit Pack| CANVAS Description| OpenOffice Database 2.3.0 Static Java Execution Notes| CVE Name: CVE-2007-4575 VENDOR: OpenOffice Repeatability: Infinite client side - no crash CVS URL: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4575 Date...

OpenOffice.org-base allows Denial-of-Service and command injection

HSQLDB before 1.8.0.9, as used in OpenOffice.org OOo 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via crafted database documents, related to "exposing static java methods."...

hsqldb / OpenOffice code execution

It's possible to execute Java code embedded to OpenOffice database document...

OpenOffice HSQLDB Document Handling Java Code Injection

Binary data 4308.prm...

Ubuntu 6.06 LTS / 6.10 / 7.04 : openoffice.org/-amd64 vulnerability (USN-524-1)

An integer overflow was discovered in the TIFF handling code in OpenOffice. If a user were tricked into loading a malicious TIFF image, a remote attacker could execute arbitrary code with user privileges. Note that Tenable Network Security has extracted the preceding description block directly fr...

Ubuntu 5.10 / 6.06 LTS : openoffice.org/-amd64, openoffice.org2/-amd64 vulnerability (USN-406-1)

An integer overflow was discovered in OpenOffice.org's handling of WMF files. If a user were tricked into opening a specially crafted WMF file, an attacker could execute arbitrary code with user privileges. Note that Tenable Network Security has extracted the preceding description block directly...

Update Protection against OpenOffice TIFF File Parsing Integer Overflow Vulnerability

An integer overflow vulnerability has been identified in the OpenOffice software suite. OpenOffice is an open source office suite that is capable of processing several types of graphic document formats, including the Tagged Image File Format TIFF. A remote attacker could exploit this issue via a...

USN-524-1: OpenOffice.org vulnerability

An integer overflow was discovered in the TIFF handling code in OpenOffice. If a user were tricked into loading a malicious TIFF image, a remote attacker could execute arbitrary code with user privileges...

openoffice -- arbitrary command execution vulnerability

iDefense reports: Remote exploitation of multiple integer overflow vulnerabilities within OpenOffice, as included in various vendors' operating system distributions, allows attackers to execute arbitrary code. These vulnerabilities exist within the TIFF parsing code of the OpenOffice suite. When...

iDefense Security Advisory 09.17.07: Multiple Vendor OpenOffice TIFF File Parsing Multiple Integer Overflow Vulnerabilities

Multiple Vendor OpenOffice TIFF File Parsing Multiple Integer Overflow Vulnerabilities iDefense Security Advisory 09.17.07 http://labs.idefense.com/intelligence/vulnerabilities/ Sep 17, 2007 I. BACKGROUND OpenOffice is an open-source desktop office suite for many of today's popular operating...

OpenOffice integer overflow

Integer overflow on TIFF images parsing...

CVE-2007-2834

Integer overflow in the TIFF parser in OpenOffice.org OOo before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite StarSuite; allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of...

OpenOffice TIFF文件解析缓冲区溢出漏洞

OpenOffice是一款开放源代码的文字处理应用程序。 OpenOffice处理TIFF文件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 构建恶意的TIFF文件，诱使用户打开可触发漏洞，目前没有详细漏洞细节提供。 OpenOffice OpenOffice 2.3 OpenOffice OpenOffice 2.2.1 OpenOffice OpenOffice 2.0.4 OpenOffice OpenOffice 1.1.3 + Gentoo Linux + RedHat Fedora Core3 + Ubuntu Ubuntu Linux 5.0 4...

OpenOffice < 2.3 TIFF Parser Multiple Overflows

Binary data 4216.prm...

OpenOffice.org: Two buffer overflows

Background OpenOffice.org is an open source office productivity suite, including word processing, spreadsheet, presentation, drawing, data charting, formula editing, and file conversion facilities. Description John Heasman of NGSSoftware has discovered a heap-based buffer overflow when parsing th...

OpenOffice Detection

OpenOffice is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25551; scriptversion"1.40"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptxrefname:"IAVT", value:"0001-T-0681"; scriptnameenglish:"OpenOffice...

OpenOffice RTF文件解析器远程堆溢出漏洞

OpenOffice是个整合性的软件，包含了许多文字处理、表格、公式等办公工具。 OpenOffice在处理带有畸形数据的RTF文档时存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 在解析文件中的prtdata标签时，OpenOffice的RTF解析器基于第一个令牌分配内存，但却拷贝了第二个令牌的内容，因此如果将第一个令牌的值设置得比第二个令牌长度小的话，就可以覆盖堆数据。远程攻击者可以通过诱骗用户打开恶意RTF文件来触发这个溢出，导致执行任意指令。 OpenOffice OpenOffice 2.2.1 Debian ------...

OpenOffice buffer overflow

Ivalid dynamic memory allocation on RTF document prtdata tag parsing...

CentOS 3 / 4 / 5 : openoffice / openoffice.org (CESA-2007:0406)

Updated openoffice.org packages to correct a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop...