RHSA-2010:0643: Important: openoffice.org security update

OpenOffice.org is an office productivity suite that includes desktopapplications, such as a word processor, spreadsheet application,presentation manager, formula editor, and a drawing program.An integer truncation error, leading to a heap-based buffer overflow, wasfound in the way the OpenOffice.org Impress presentation applicationsanitized a file's dictionary property items. An attacker could use thisflaw to create a specially-crafted Microsoft Office PowerPoint file that,when opened, would cause OpenOffice.org Impress to crash or, possibly,execute arbitrary code with the privileges of the user runningOpenOffice.org Impress. (CVE-2010-2935)An integer overflow flaw, leading to a heap-based buffer overflow, wasfound in the way OpenOffice.org Impress processed polygons in inputdocuments. An attacker could use this flaw to create a specially-craftedMicrosoft Office PowerPoint file that, when opened, would causeOpenOffice.org Impress to crash or, possibly, execute arbitrary code withthe privileges of the user running OpenOffice.org Impress. (CVE-2010-2936)All users of OpenOffice.org are advised to upgrade to these updatedpackages, which contain backported patches to correct these issues. For RedHat Enterprise Linux 3, this erratum provides updated openoffice.orgpackages. For Red Hat Enterprise Linux 4, this erratum provides updatedopenoffice.org and openoffice.org2 packages. All running instances ofOpenOffice.org applications must be restarted for this update to takeeffect.