OpenOffice.org WMF integer overflow

Heap-based buffer overflow in OpenOffice.org OOo 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted WMF file associated with a StarOffice/StarSuite document...

openoffice.org security update

1.1.5-10.0.7 - CVE-2008-2237 WMF integer overflow - CVE-2008-2237 Multiple EMF flaws - Resolves: rhbz462720 Multiple flaws...

Fedora 8 : openoffice.org-2.3.0-6.17.fc8 (2008-9333)

A security release to address: - CVE-2008-2237: Manipulated WMF files - CVE-2008-2238: Manipulated EMF files as described at http://www.openoffice.org/security/bulletin.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Debian: Security Advisory (DSA-1661-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1661-1 (openoffice.org)

The remote host is missing an update to openoffice.org announced via advisory DSA 1661-1. OpenVAS Vulnerability Test $Id: deb16611.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1661-1 openoffice.org Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...

OpenOffice WMF和EMF文件处理堆缓冲区溢出漏洞

BUGTRAQ ID: 31962 CVE ID：CVE-2008-2237 CVE-2008-2238 CNCVE ID：CNCVE-20082237 CNCVE-20082238 OpenOffice是一款开放源代码的文字处理程序。 OpenOffice处理WMF和EMF文件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 目前没有详细的漏洞细节提供。构建特殊的WMF和EMF文件可触发基于堆的溢出。 OpenOffice OpenOffice 2.4.1 OpenOffice OpenOffice 2.3.1 OpenOffice OpenOffice 2.3...

CVE-2008-2237

Heap-based buffer overflow in OpenOffice.org OOo 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted WMF file associated with a StarOffice/StarSuite document...

Heap overflow

Heap-based buffer overflow in OpenOffice.org OOo 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted WMF file associated with a StarOffice/StarSuite document...

CVE-2008-2237

Heap-based buffer overflow in OpenOffice.org OOo 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted WMF file associated with a StarOffice/StarSuite document...

CVE-2008-2237

Heap-based buffer overflow in OpenOffice.org OOo 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted WMF file associated with a StarOffice/StarSuite document...

CVE-2008-2237

CVE-2008-2237 describes a heap-based overflow in the OpenOffice.org WMF image handling that could allow remote code execution via a crafted WMF file. Affected: OpenOffice.org 2.x up to 2.4.2. The issue also relates to similar integer overflow/heap overflow flaws in the EMF parser (CVE-2008-2238)....

[Backports-security-announce] Security update for openoffice.org

Rene Engelhard uploaded new packages for openoffice.org which fixed the following security problems: Debian BTS 496361 left-over debugging echos writing into an insecure temp file can allow attackers to overwrite files on the system with the prvilieges of the user executing senddoc File - Send...

[Backports-security-announce] Security update for openoffice.org

Rene Engelhard uploaded new packages for openoffice.org which fixed the following security problems: Debian BTS 496361 left-over debugging echos writing into an insecure temp file can allow attackers to overwrite files on the system with the prvilieges of the user executing senddoc File - Send...

OpenOffice < 2.4.2 WMF and EMF File Handling Buffer Overflows

The version of OpenOffice 2.x installed on the remote host is earlier than 2.4.2. Such versions are affected by several issues : - Specially crafted WMF files can lead to heap-based overflows and arbitrary code execution CVE-2008-2237. - Specially crafted EMF files can lead to heap-based overflow...

OpenOffice < 2.4.2 WMF and EMF File Handling Buffer Overflows

Binary data 4727.prm...

openoffice -- arbitrary code execution vulnerabilities

The OpenOffice Team reports: A security vulnerability with the way OpenOffice 2.x process WMF files may allow a remote unprivileged user who provides a StarOffice/StarSuite document that is opened by a local user to execute arbitrary commands on the system with the privileges of the user running...

Microsoft Windows GRE WMF格式多个非授权内存访问漏洞

BUGTRAQ ID: 16167 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows图形渲染引擎（GRE）在渲染WMF格式文件时存在多个非授权内存访问漏洞，攻击者可能利用此漏洞导致拒绝服务。 具体如下： 1. ExtCreateRegion调用导致非授权的内存访问 创建如下的WMF文件： 010009000003220000000100844300000000 //WMFHEAD 050000000B028B033F21 //first WMFRECORD...

MS08-0 5 2 WMF vulnerability analysis and vulnerability testing-vulnerability warning-the black bar safety net

------ by CuteK A background knowledge By the file format to start with,to analyze the MS08-0 5 2 vulnerability, and construct a you can make without the patch the program crash pictures, 1 WMF file structure --------------------------| | Files head | |-------------------------| | File-record |...

Gentoo Security Advisory GLSA 200701-07 (openoffice)

The remote host is missing updates announced in advisory GLSA 200701-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200701-07 (openoffice)

The remote host is missing updates announced in advisory GLSA 200701-07. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...