Stay Secure with the Latest Linux Advisories

security advisorybuffer overflowdirectory traversal

SciLinux: Important OpenOffice.org Update For Multiple Issues

Important: openoffice.org security update. Date: Mon, 31 Jan 2011 15:27:52 -0600 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA Important: openoffice.org on SL5.x i386/x86_64 Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it." Synopsis: Important: openoffice.org security update Issue date: 2011-01-28 CVE Names: CVE-2010-3450 CVE-2010-3451 CVE-2010-3452 CVE-2010-3453 CVE-2010-3454 CVE-2010-3689 CVE-2010-4253 CVE-2010-4643 An array index error and an integer signedness error were found in the way OpenOffice.org parsed certain Rich Text Format (RTF) files. An attacker could use these flaws to create a specially-crafted RTF file that, when opened, would cause OpenOffice.org to crash or, possibly, execute arbitrary code with the privileges of the user running OpenOffice.org. (CVE-2010-3451, CVE-2010-3452) A heap-based buffer overflow flaw and an array index error were found in the way OpenOffice.org parsed certain Microsoft Office Word documents. An attacker could use these flaws to create a specially-crafted Microsoft Office Word document that, when opened, would cause OpenOffice.org to crash or, possibly, execute arbitrary code with the privileges of the user running OpenOffice.org. (CVE-2010-3453, CVE-2010-3454) A heap-based buffer overflow flaw was found in the way OpenOffice.org parsed certain Microsoft Office PowerPoint files. An attacker could use this flaw to create a specially-crafted Microsoft Office PowerPoint file that, when opened, would cause OpenOffice.org to crash or, possibly, execute arbitrary code with the privileges of the user running OpenOffice.org. (CVE-2010-4253) A heap-based buffer overflow flaw was found in the way OpenOffice.org parsed certain TARGA (Truevision TGA) files. An attacker could use this flaw to create a specially-crafted TARGA file. If a document containing this specially-crafted TARGA file was opened, or if a user tried to insert the file into an existing document, it would cause OpenOffice.org tocrash or, possibly, execute arbitrary code with the privileges of the user running OpenOffice.org. (CVE-2010-4643) A directory traversal flaw was found in the way OpenOffice.org handled the installation of XSLT filter descriptions packaged in Java Archive (JAR) files, as well as the installation of OpenOffice.org Extension (.oxt) files. An attacker could use these flaws to create a specially-crafted XSLT filter description or extension file that, when opened, would cause the OpenOffice.org Extension Manager to modify files accessible to the user installing the JAR or extension file. (CVE-2010-3450) A flaw was found in the script that launches OpenOffice.org. In some situations, a "." character could be included in the LD_LIBRARY_PATH variable, allowing a local attacker to execute arbitrary code with the privileges of the user running OpenOffice.org, if that user ran OpenOffice.org from within an attacker-controlled directory. (CVE-2010-3689) All running instances of OpenOffice.org applications must be restarted for this update to take effect. SL 5.x SRPMS: openoffice.org-3.1.1-19.5.el5_5.6.src.rpm i386: openoffice.org-base-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-calc-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-core-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-draw-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-emailmerge-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-graphicfilter-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-headless-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-impress-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-javafilter-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-af_ZA-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-ar-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-as_IN-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-bg_BG-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-bn-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-ca_ES-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-cs_CZ-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-cy_GB-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-da_DK-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-de-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-el_GR-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-es-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-et_EE-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-eu_ES-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-fi_FI-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-fr-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-ga_IE-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-gl_ES-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-gu_IN-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-he_IL-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-hi_IN-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-hr_HR-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-hu_HU-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-it-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-ja_JP-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-kn_IN-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-ko_KR-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-lt_LT-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-ml_IN-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-mr_IN-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-ms_MY-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-nb_NO-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-nl-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-nn_NO-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-nr_ZA-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-nso_ZA-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-or_IN-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-pa_IN-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-pl_PL-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-pt_BR-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-pt_PT-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-ru-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-sk_SK-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-sl_SI-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-sr_CS-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-ss_ZA-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-st_ZA-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-sv-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-ta_IN-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-te_IN-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-th_TH-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-tn_ZA-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-tr_TR-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-ts_ZA-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-ur-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-ve_ZA-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-xh_ZA-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-zh_CN-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-zh_TW-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-langpack-zu_ZA-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-math-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-pyuno-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-sdk-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-sdk-doc-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-testtools-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-ure-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-writer-3.1.1-19.5.el5_5.6.i386.rpm openoffice.org-xsltfilter-3.1.1-19.5.el5_5.6.i386.rpm x86_64: openoffice.org-base-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-calc-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-core-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-draw-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-emailmerge-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-graphicfilter-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-headless-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-impress-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-javafilter-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-af_ZA-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-ar-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-as_IN-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-bg_BG-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-bn-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-ca_ES-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-cs_CZ-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-cy_GB-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-da_DK-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-de-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-el_GR-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-es-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-et_EE-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-eu_ES-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-fi_FI-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-fr-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-ga_IE-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-gl_ES-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-gu_IN-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-he_IL-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-hi_IN-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-hr_HR-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-hu_HU-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-it-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-ja_JP-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-kn_IN-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-ko_KR-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-lt_LT-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-ml_IN-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-mr_IN-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-ms_MY-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-nb_NO-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-nl-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-nn_NO-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-nr_ZA-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-nso_ZA-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-or_IN-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-pa_IN-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-pl_PL-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-pt_BR-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-pt_PT-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-ru-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-sk_SK-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-sl_SI-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-sr_CS-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-ss_ZA-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-st_ZA-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-sv-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-ta_IN-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-te_IN-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-th_TH-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-tn_ZA-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-tr_TR-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-ts_ZA-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-ur-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-ve_ZA-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-xh_ZA-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-zh_CN-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-zh_TW-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-langpack-zu_ZA-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-math-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-pyuno-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-sdk-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-sdk-doc-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-testtools-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-ure-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-writer-3.1.1-19.5.el5_5.6.x86_64.rpm openoffice.org-xsltfilter-3.1.1-19.5.el5_5.6.x86_64.rpm -Connie Sieh -Troy Dawson lastline . The major security enhancement from OpenOffice.org tackles various weaknesses, promoting secure file management practices.. OpenOffice Update, Scientific Linux, Security Advisory, Code Execution, Buffer Overflow. . Severity: Important. LinuxSecurity.com Team

Jan 31, 2011 •Important Scientific Linux