Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu 10.04 LTS: USN-1537-1 High: OpenOffice.org Code Execution

ubuntu
Calendar Grey August 14, 2012
Scroller Ubuntu
A security flaw in LibreOffice may result in system instability or unauthorized script execution on Ubuntu 14.04 LTS.
OpenOffice.org could be made to crash or run programs as your login if it opened a specially crafted file.

Summary

OpenOffice.org could be made to crash or run programs as your login if it

opened a specially crafted file.

Software Description:

- openoffice.org: Office productivity suite

Details:

It was discovered that OpenOffice.org incorrectly handled certain

encryption tags in Open Document Text (.odt) files. If a user were tricked

into opening a specially crafted file, an attacker could cause

OpenOffice.org to crash or possibly execute arbitrary code with the

privileges of the user invoking the program.

Topics%20covered

Topics Covered

security advisory security issue software update code execution Ubuntu OpenOffice.org crash

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.04 LTS:
  openoffice.org-core             1:3.2.0-7ubuntu4.4

After a standard system update you need to restart OpenOffice.org to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1537-1

CVE-2012-2665

August 13, 2012

Topics%20covered

Topics Covered

security advisory security issue software update code execution Ubuntu OpenOffice.org crash

Package Information

https://launchpad.net/ubuntu/+source/openoffice.org/1:3.2.0-7ubuntu4.4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.