REDHAT-BUG-574119: Medium severity apache openoffice vulnerability
Marc Schoenefeld found a flaw in the way OpenOffice.org 3.2.0 and earlier, enforced non-executable permission, when browsing macros, written in Python scripting language. If a local user was tricked into opening a specially-crafted OpenDocument Text (ODT) file, containing macros, and previewed the macro directories structure, it could lead to Python macro execution even when macros execution was disabled.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-574119?
The severity of REDHAT-BUG-574119 is classified as critical due to its potential for execution of arbitrary code via malicious macros.
How do I fix REDHAT-BUG-574119?
To fix REDHAT-BUG-574119, upgrade to a version of OpenOffice that is newer than 3.2.0, which addresses this vulnerability.
Who is affected by REDHAT-BUG-574119?
Users of Apache OpenOffice version 3.2.0 and earlier are affected by REDHAT-BUG-574119.
What type of vulnerability is REDHAT-BUG-574119?
REDHAT-BUG-574119 is a vulnerability related to insufficient enforcement of non-executable permissions on macros.
What can attackers do with REDHAT-BUG-574119?
Attackers can exploit REDHAT-BUG-574119 to execute arbitrary code on a victim's system by tricking them into opening a malicious ODT file.