RHSA-2010:0101: Important: openoffice.org security update

First published: Fri Feb 12 2010(Updated: )

OpenOffice.org is an office productivity suite that includes desktop<br>applications, such as a word processor, spreadsheet application,<br>presentation manager, formula editor, and a drawing program.<br>An integer overflow flaw, leading to a heap-based buffer overflow, was<br>found in the way OpenOffice.org parsed XPM files. An attacker could create<br>a specially-crafted document, which once opened by a local, unsuspecting<br>user, could lead to arbitrary code execution with the permissions of the<br>user running OpenOffice.org. Note: This flaw affects embedded XPM files in<br>OpenOffice.org documents as well as stand-alone XPM files. (CVE-2009-2949)<br>An integer underflow flaw and a boundary error flaw, both possibly leading<br>to a heap-based buffer overflow, were found in the way OpenOffice.org<br>parsed certain records in Microsoft Word documents. An attacker could<br>create a specially-crafted Microsoft Word document, which once opened by a<br>local, unsuspecting user, could cause OpenOffice.org to crash or,<br>potentially, execute arbitrary code with the permissions of the user<br>running OpenOffice.org. (CVE-2009-3301, CVE-2009-3302)<br>A heap-based buffer overflow flaw, leading to memory corruption, was found<br>in the way OpenOffice.org parsed GIF files. An attacker could create a<br>specially-crafted document, which once opened by a local, unsuspecting<br>user, could cause OpenOffice.org to crash. Note: This flaw affects embedded<br>GIF files in OpenOffice.org documents as well as stand-alone GIF files.<br>(CVE-2009-2950)<br>All users of OpenOffice.org are advised to upgrade to these updated<br>packages, which contain backported patches to correct these issues. All<br>running instances of OpenOffice.org applications must be restarted for this<br>update to take effect.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/severity
• agent/type
• agent/weakness
• agent/references
• agent/softwarecombine
• agent/first-publish-date
• agent/last-modified-date
• collector/redhat-errata
• source/Red Hat
• anchor-id/RHSA-2010:0101
• agent/software-canonical-lookup
• agent/remedy
• agent/title
• agent/description
• agent/event
• agent/trending
• agent/tags
• agent/source
• package-manager/redhat