Important: Red Hat Security Advisory: openoffice.org security update

Updated openoffice.org packages that correct security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop...

openoffice.org security update

1.1.5-10.0.7 - CVE-2008-2237 WMF integer overflow - CVE-2008-2237 Multiple EMF flaws - Resolves: rhbz462720 Multiple flaws...

Fedora 8 : openoffice.org-2.3.0-6.17.fc8 (2008-9333)

A security release to address: - CVE-2008-2237: Manipulated WMF files - CVE-2008-2238: Manipulated EMF files as described at http://www.openoffice.org/security/bulletin.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Debian: Security Advisory (DSA-1661-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1661-1 (openoffice.org)

The remote host is missing an update to openoffice.org announced via advisory DSA 1661-1. OpenVAS Vulnerability Test $Id: deb16611.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1661-1 openoffice.org Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...

OpenOffice WMF和EMF文件处理堆缓冲区溢出漏洞

BUGTRAQ ID: 31962 CVE ID：CVE-2008-2237 CVE-2008-2238 CNCVE ID：CNCVE-20082237 CNCVE-20082238 OpenOffice是一款开放源代码的文字处理程序。 OpenOffice处理WMF和EMF文件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 目前没有详细的漏洞细节提供。构建特殊的WMF和EMF文件可触发基于堆的溢出。 OpenOffice OpenOffice 2.4.1 OpenOffice OpenOffice 2.3.1 OpenOffice OpenOffice 2.3...

CVE-2008-2237

Heap-based buffer overflow in OpenOffice.org OOo 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted WMF file associated with a StarOffice/StarSuite document...

CVE-2008-2237

Heap-based buffer overflow in OpenOffice.org OOo 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted WMF file associated with a StarOffice/StarSuite document...

Heap overflow

Heap-based buffer overflow in OpenOffice.org OOo 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted WMF file associated with a StarOffice/StarSuite document...

CVE-2008-2237

CVE-2008-2237 describes a heap-based overflow in the OpenOffice.org WMF image handling that could allow remote code execution via a crafted WMF file. Affected: OpenOffice.org 2.x up to 2.4.2. The issue also relates to similar integer overflow/heap overflow flaws in the EMF parser (CVE-2008-2238)....

CVE-2008-2237

Heap-based buffer overflow in OpenOffice.org OOo 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted WMF file associated with a StarOffice/StarSuite document...

[Backports-security-announce] Security update for openoffice.org

Rene Engelhard uploaded new packages for openoffice.org which fixed the following security problems: Debian BTS 496361 left-over debugging echos writing into an insecure temp file can allow attackers to overwrite files on the system with the prvilieges of the user executing senddoc File - Send...

[Backports-security-announce] Security update for openoffice.org

Rene Engelhard uploaded new packages for openoffice.org which fixed the following security problems: Debian BTS 496361 left-over debugging echos writing into an insecure temp file can allow attackers to overwrite files on the system with the prvilieges of the user executing senddoc File - Send...

OpenOffice < 2.4.2 WMF and EMF File Handling Buffer Overflows

Binary data 4727.prm...

openoffice -- arbitrary code execution vulnerabilities

The OpenOffice Team reports: A security vulnerability with the way OpenOffice 2.x process WMF files may allow a remote unprivileged user who provides a StarOffice/StarSuite document that is opened by a local user to execute arbitrary commands on the system with the privileges of the user running...

OpenOffice < 2.4.2 WMF and EMF File Handling Buffer Overflows

The version of OpenOffice 2.x installed on the remote host is earlier than 2.4.2. Such versions are affected by several issues : - Specially crafted WMF files can lead to heap-based overflows and arbitrary code execution CVE-2008-2237. - Specially crafted EMF files can lead to heap-based overflow...

Microsoft Windows GRE WMF格式多个非授权内存访问漏洞

BUGTRAQ ID: 16167 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows图形渲染引擎（GRE）在渲染WMF格式文件时存在多个非授权内存访问漏洞，攻击者可能利用此漏洞导致拒绝服务。 具体如下： 1. ExtCreateRegion调用导致非授权的内存访问 创建如下的WMF文件： 010009000003220000000100844300000000 //WMFHEAD 050000000B028B033F21 //first WMFRECORD...

MS08-0 5 2 WMF vulnerability analysis and vulnerability testing-vulnerability warning-the black bar safety net

------ by CuteK A background knowledge By the file format to start with,to analyze the MS08-0 5 2 vulnerability, and construct a you can make without the patch the program crash pictures, 1 WMF file structure --------------------------| | Files head | |-------------------------| | File-record |...

Gentoo Security Advisory GLSA 200701-07 (openoffice)

The remote host is missing updates announced in advisory GLSA 200701-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200701-07 (openoffice)

The remote host is missing updates announced in advisory GLSA 200701-07. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...