|
|
Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200510-12] KOffice, KWord: RTF import buffer overflow Vulnerability Scan
Vulnerability Scan Summary
KOffice, KWord: RTF import buffer overflow
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200510-12
(KOffice, KWord: RTF import buffer overflow)
Chris Evans discovered that the KWord RTF importer was vulnerable
to a heap-based buffer overflow.
Impact
A possible hacker could entice a user to open a specially-crafted RTF
file, potentially resulting in the execution of arbitrary code with the
rights of the user running the affected application.
Workaround
There is no known workaround at this time.
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-2971
http://www.kde.org/info/security/advisory-20051011-1.txt
Solution:
All KOffice users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-office/koffice-1.4.1-r1"
All KWord users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-office/kword-1.4.1-r1"
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|
