REDHAT-BUG-602324
First published: Wed Jun 09 2010(Updated: )
Originally Marc Schoenefeld found a directory traversal flaw in the way OpenOffice.org prior to v3.2.1 handled XSLT jar filter description files installation. If a local user was tricked to install a specially-crafted OOo XSLT jar filter description file, it could allow remote attackers to create or overwrite arbitrary files belonging to local user or, potentially, execute arbitrary code via a .. (dot dot) in an entry in a XSLT filter description file. Later, OpenOffice.org upstream identified the same deficiency in the way OOs Extension Manager performed installation of OpenOffice.org Extension (*.OXT) files. References: [1] <a href="http://extensions.services.openoffice.org/en/resources">http://extensions.services.openoffice.org/en/resources</a> [2] <a href="http://wiki.services.openoffice.org/wiki/Documentation/DevGuide/Extensions/Extensions">http://wiki.services.openoffice.org/wiki/Documentation/DevGuide/Extensions/Extensions</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apache OpenOffice | <3.2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://extensions.services.openoffice.org/en/resources
- http://wiki.services.openoffice.org/wiki/Documentation/DevGuide/Extensions/Extensions
- http://www.openoffice.org/security/cves/CVE-2010-3450.html
- https://rhn.redhat.com/errata/RHSA-2011-0181.html
- https://rhn.redhat.com/errata/RHSA-2011-0182.html
- https://rhn.redhat.com/errata/RHSA-2011-0183.html
- https://bugzilla.redhat.com/show_bug.cgi?id=602324
Frequently Asked Questions
What is the severity of REDHAT-BUG-602324?
REDHAT-BUG-602324 is classified as a medium severity vulnerability due to the potential for local exploitation.
How do I fix REDHAT-BUG-602324?
To fix REDHAT-BUG-602324, users should upgrade to Apache OpenOffice version 3.2.1 or later.
What type of vulnerability is REDHAT-BUG-602324?
REDHAT-BUG-602324 is a directory traversal vulnerability affecting older versions of Apache OpenOffice.
Who is affected by REDHAT-BUG-602324?
Users of Apache OpenOffice versions prior to 3.2.1 are affected by REDHAT-BUG-602324.
Can REDHAT-BUG-602324 be exploited remotely?
No, REDHAT-BUG-602324 requires local user interaction to exploit the vulnerability.
- collector/redhat-bugzilla
- alias/CVE-2010-3450
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/apache
- canonical/apache openoffice