|
|
Family: Ubuntu Local Security Checks --> Category: infos
USN121-1 : openoffice.org vulnerability Vulnerability Scan
Vulnerability Scan Summary
openoffice.org vulnerability
Detailed Explanation for this Vulnerability Test
Synopsis :
These remote packages are missing security patches :
- openoffice.org
- openoffice.org-bin
- openoffice.org-crashrep
- openoffice.org-gtk-gnome
- openoffice.org-kde
- openoffice.org-l10n-af
- openoffice.org-l10n-ar
- openoffice.org-l10n-ca
- openoffice.org-l10n-cs
- openoffice.org-l10n-cy
- openoffice.org-l10n-da
- openoffice.org-l10n-de
- openoffice.org-l10n-el
- openoffice.org-l10n-en
- openoffice.org-l10n-es
- openoffice.org-l10n-et
- openoffice.org-l10n-eu
- openoffice.org-l10n-fi
- o
[...]
Description :
The StgCompObjStream::Load() failed to check the validity of a length
field in documents. If a possible hacker tricked a user to open a specially
crafted OpenOffice file, this triggered a buffer overflow which could
lead to arbitrary code execution with the rights of the user
opening the document.
The update for Ubuntu 5.04 (Hoary Hedgehog) also contains a
translation update: The "openoffice.org-l10n-xh" package now contains
actual Xhosa translations (the previous version just shipped English
strings).
Solution :
Upgrade to :
- openoffice.org-1.1.3-8ubuntu2.3 (Ubuntu 5.04)
- openoffice.org-bin-1.1.3-8ubuntu2.3 (Ubuntu 5.04)
- openoffice.org-crashrep-1.1.2-2ubuntu6.1 (Ubuntu 4.10)
- openoffice.org-gtk-gnome-1.1.3-8ubuntu2.3 (Ubuntu 5.04)
- openoffice.org-kde-1.1.3-8ubuntu2.3 (Ubuntu 5.04)
- openoffice.org-l10n-af-1.1.3-8ubuntu2.3 (Ubuntu 5.04)
- openoffice.org-l10n-ar-1.1.3-8ubuntu2.3 (Ubuntu 5.04)
- openoffice.org-l10n-ca-1.1.3-8ubuntu2.3 (Ubuntu 5.04)
- openoffice.org-l10n-cs-1.1.3-8ubuntu2.3 (Ubuntu 5.04)
- open
[...]
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
