REDHAT-BUG-533038: Buffer Overflow

Published Nov 4, 2009

Updated

An integer underflow flaw, possibly leading to a heap-based buffer overflow, was found in the way OpenOffice.org parsed certain records in Microsoft Word documents. An attacker could create a specially-crafted Microsoft Word document, which once opened by a local, unsuspecting user, could cause OpenOffice.org to crash or, potentially, execute arbitrary code with the permissions of the user running OpenOffice.org.

Credit: Nicolas Joly of VUPEN Vulnerability Research Team

Affected Software

1 affected component

Apache Openoffice.org

Event History

Nov 4, 2009

Data Sourced

via Red Hat·07:03 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-533038?

The severity of REDHAT-BUG-533038 is categorized as critical due to the potential for exploitation through malicious Microsoft Word documents.

How do I fix REDHAT-BUG-533038?

To fix REDHAT-BUG-533038, you should update to a patched version of Apache OpenOffice that addresses this vulnerability.

What type of vulnerability is REDHAT-BUG-533038?

REDHAT-BUG-533038 is an integer underflow flaw that may lead to a heap-based buffer overflow.

Who is affected by REDHAT-BUG-533038?

Users of Apache OpenOffice who open specially-crafted Microsoft Word documents are affected by REDHAT-BUG-533038.

Can I mitigate REDHAT-BUG-533038 without an update?

While an update is the best solution, users can mitigate REDHAT-BUG-533038 by avoiding opening untrusted Microsoft Word documents.