Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Gentoo: GLSA-200802-05 Normal: Gnumeric User-Assisted Code Execution

gentoo
Calendar Grey February 12, 2008
Scroller Gentoo
Integer overflow vulnerabilities in Gnumeric could potentially enable user-assisted code execution. Users are advised to upgrade to the latest version.
Several integer overflow vulnerabilities have been reported in Gnumeric, possibly resulting in user-assisted execution of arbitrary code

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200802-05
                                            https://security.gentoo.org/

  Severity: Normal
     Title: Gnumeric: User-assisted execution of arbitrary code
      Date: February 12, 2008
      Bugs: #208356
        ID: 200802-05


Synopsis
=======
Several integer overflow vulnerabilities have been reported in
Gnumeric, possibly resulting in user-assisted execution of arbitrary
code.

Background
=========
The Gnumeric spreadsheet is a versatile application developed as part
of the GNOME Office project.

Affected packages
================
    -------------------------------------------------------------------
     Package              /  Vulnerable  /                  Unaffected
    -------------------------------------------------------------------
  1  app-office/gnumeric       < 1.8.1                        >= 1.8.1

==========
Multiple integer overflow and signedness err...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory code execution application update integer overflow Gnumeric normal user-assisted

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory code execution application update integer overflow Gnumeric normal user-assisted

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround