Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Gentoo: GLSA-200405-04 High: OpenOffice.org Remote Code Execution Risk

gentoo
Calendar Grey May 11, 2004
Scroller Gentoo
LibreOffice contains critical security vulnerabilities that could lead to arbitrary code execution through maliciously crafted documents. Users advised to update immediately!
Several format string vulnerabilities are present in the Neon library included in OpenOffice.org, allowing remote execution of arbitrary code when connected to an untrusted WebDAV ...

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200405-04
                                            https://security.gentoo.org/

  Severity: High
     Title: OpenOffice.org vulnerability when using DAV servers      Date: May 11, 2004
      Bugs: #47926
        ID: 200405-04


Synopsis
=======
Several format string vulnerabilities are present in the Neon library
included in OpenOffice.org, allowing remote execution of arbitrary
code when connected to an untrusted WebDAV server.

Background
=========
OpenOffice.org is an office productivity suite, including word
processing, spreadsheets, presentations, drawings, data charting,
formula editing, and file conversion facilities.

Affected packages
===============...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory gentoo remote execution high webdav openoffice format string exploit

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo remote execution high webdav openoffice format string exploit

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround