This update of OpenOffice_org includes fixes for the following vulnerabilities :

  - XML signature weakness. (CVE-2009-0217)

  - XPM Import Integer Overflow. (CVE-2009-2949)

  - GIF Import Heap Overflow. (CVE-2009-2950)

  - MS Word sprmTDefTable Memory Corruption. (CVE-2009-3301)

  - MS Word sprmTDefTable Memory Corruption. (CVE-2009-3302)

  - In the ooo-build variant of OpenOffice_org VBA Macro     support does not honor Macro security settings.
    (CVE-2010-0136)

This also provides the maintenance update to OpenOffice.org-3.2.

Details about all upstream changes can be found at http://development.openoffice.org/releases/3.2.0.html

- Fri Feb 12 2010 Caolan McNamara <caolanm at redhat.com>
    - 1:3.1.1-19.26

    - CVE-2009-2950 GIF file parsing heap overflow (caolanm)

    - CVE-2009-2949 integer overflow in XPM processing       (caolanm)

    - CVE-2009-3301 .doc Table Parsing vulernability       (caolanm)

    - CVE-2009-3302 .doc Table Parsing vulernability       (caolanm)

    - Resolves: rhbz#561778       openoffice.org-3.2.0.oooXXXXX.svx.safestyledelete.patc       h

    - Resolves: rhbz#561989       openoffice.org-3.2.0.ooo109009.sc.tooltipcrash.patch

    - Resolves: rhbz#445588 improve same name substitution

    - Tue Feb 2 2010 Caolan McNamara <caolanm at redhat.com>
      - 1:3.1.1-19.25

    - Resolves: rhbz#549890 add workspace.extmgr01.patch       (dtardon)

    - Resolves: rhbz#551983 OpenOffice writer crashes when       opening document with link in footnote (dtardon)

  - Resolves: rhbz#550316 Openoffice.org Impress loses     graphics when background color is changed (dtardon)

  - Resolves: rhbz#554259 No autocorrect files for     Lithuanian (dtardon)

    - Resolves: rhbz#553929 [abrt] crash in       ColorConfigCtrl_Impl::ScrollHdl (dtardon)

  - Resolves: rhbz#549573 improve document compare (caolanm)

    - Resolves: rbhz#555257 openoffice cannot use JPEG       images using CMYK colorspace (dtardon)

  - Resolves: rhbz#558342 [abrt] crash in     SvxNumOptionsTabPage::InitControls (dtardon)

  - Resolves: ooo#108637/rhbz#558253 sfx2 uisavedir     (caolanm)

    - Resolves: rhbz#560435 rtf dropcap crash (caolanm)

    - Resolves: rhbz#560996/rhbz#560353 qstartfixes       (caolanm)

    - Tue Dec 22 2009 Caolan McNamara <caolanm at       redhat.com> - 1:3.1.1-19.24

    - Resolves: rhbz#545824 bustage in writer with       emboldened fonts

    - Fri Dec 18 2009 Caolan McNamara <caolanm at       redhat.com> - 1:3.1.1-19.23

    - Resolves: rhbz#548512 workspace.ooo32gsl03.patch

    - Tue Dec 15 2009 Caolan McNamara <caolanm at       redhat.com> - 1:3.1.1-19.22

    - Resolves: rhbz#529648 add workspace.fwk132.patch

    - Resolves: rhbz#547176 add       openoffice.org-3.2.0.ooo47279.sd.objectsave.safe.patch

  - Wed Dec 9 2009 Caolan McNamara <caolanm at redhat.com> -     1:3.1.1-19.21

    - Resolves: rhbz#544124 add       openoffice.org-3.2.0.ooo106502.svx.fixspelltimer.patch

    - Resolves: rhbz#544218 add       openoffice.org-3.2.0.ooo107552.vcl.sft.patch

    - Resolves: rhbz#545783 add workspace.vcl105.patch

    - Fri Nov 27 2009 Caolan McNamara <caolanm at       redhat.com> - 1:3.1.1-19.20

    - Resolves: rhbz#541222 add       openoffice.org-3.2.0.ooo107260.dtrans.clipboard.shutdo       wn.patch (caolanm)

  - Mon Nov 23 2009 Caolan McNamara <caolanm at redhat.com>
    - 1:3.1.1-19.19

    - Resolves: rhbz#540379/ooo#107131 impress tabledrag       crash

    - Resolves: rhbz#540231 add       openoffice.org-3.2.0.oooXXXXX.canvas.fixcolorspace.pat       ch

    - add       openoffice.org-4.2.0.ooo107151.sc.pop-empty-cell.patch       (dtardon)

    - Resolves: rhbz#533538 OpenOffice keyboard shortcuts       mis-map in the Spanish localized version of OOo       (caolanm)

  - Tue Nov 17 2009 Caolan McNamara <caolanm at redhat.com>
    - 1:3.1.1-19.18

    - Resolves: ooo#59648 sw .doc export scaling (caolanm)

    - Tue Nov 10 2009 Caolan McNamara <caolanm at       redhat.com> - 1:3.1.1-19.17

    - Resolves: rhbz#533841 ooo#105710 svx       loadstorenumbering (caolanm)

[plus 8 lines in the Changelog]

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update of OpenOffice_org includes fixes for the following vulnerabilities :

  - XML signature weakness CVE-2009-2949: XPM Import Integer     Overflow CVE-2009-2950: GIF Import Heap Overflow     CVE-2009-3301: MS Word sprmTDefTable Memory Corruption     CVE-2009-3302: MS Word sprmTDefTable Memory Corruption     CVE-2010-0136: In the ooo-build variant of     OpenOffice_org VBA Macro support does not honor Macro     security settings. (CVE-2009-0217)

This also provides the maintenance update to OpenOffice.org-3.2.

CVE-2009-2950 openoffice.org: GIF file parsing heap overflow

CVE-2009-2949 openoffice.org: integer overflow in XPM processing

CVE-2009-3301 OpenOffice.org Word sprmTDefTable Memory Corruption

CVE-2009-3302 OpenOffice.org Word sprmTSetBrc Memory Corruption

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way OpenOffice.org parsed XPM files. An attacker could create a specially crafted document, which once opened by a local, unsuspecting user, could lead to arbitrary code execution with the permissions of the user running OpenOffice.org. Note: This flaw affects embedded XPM files in OpenOffice.org documents as well as stand-alone XPM files. (CVE-2009-2949)

An integer underflow flaw and a boundary error flaw, both possibly leading to a heap-based buffer overflow, were found in the way OpenOffice.org parsed certain records in Microsoft Word documents. An attacker could create a specially crafted Microsoft Word document, which once opened by a local, unsuspecting user, could cause OpenOffice.org to crash or, potentially, execute arbitrary code with the permissions of the user running OpenOffice.org. (CVE-2009-3301, CVE-2009-3302)

A heap-based buffer overflow flaw, leading to memory corruption, was found in the way OpenOffice.org parsed GIF files. An attacker could create a specially crafted document, which once opened by a local, unsuspecting user, could cause OpenOffice.org to crash. Note: This flaw affects embedded GIF files in OpenOffice.org documents as well as stand-alone GIF files. (CVE-2009-2950)

All running instances of OpenOffice.org applications must be restarted for this update to take effect.

Several vulnerabilities have been discovered in the OpenOffice.org office suite. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2010-0136     It was discovered that macro security settings were     insufficiently enforced for VBA macros.

  - CVE-2009-0217     It was discovered that the W3C XML Signature     recommendation contains a protocol-level vulnerability     related to HMAC output truncation. This also affects the     integrated libxmlsec library.

  - CVE-2009-2949     Sebastian Apelt discovered that an integer overflow in     the XPM import code may lead to the execution of     arbitrary code.

  - CVE-2009-2950     Sebastian Apelt and Frank Reissner discovered that a     buffer overflow in the GIF import code may lead to the     execution of arbitrary code.

  - CVE-2009-3301/ CVE-2009-3302     Nicolas Joly discovered multiple vulnerabilities in the     parser for Word document files, which may lead to the     execution of arbitrary code.

- Fri Feb 12 2010 Caolan McNamara <caolanm at redhat.com>
    - 1:3.1.1-19.12

    - CVE-2009-2950 GIF file parsing heap overflow (caolanm)

    - CVE-2009-2949 integer overflow in XPM processing       (caolanm)

    - CVE-2009-3301 .doc Table Parsing vulernability       (caolanm)

    - CVE-2009-3302 .doc Table Parsing vulernability       (caolanm)

    - Resolves: rhbz#549890 add workspace.extmgr01.patch       (dtardon)

    - Resolves: rhbz#551983 OpenOffice writer crashes when       opening document with link in footnote (dtardon)

  - Resolves: rhbz#550316 Openoffice.org Impress loses     graphics when background color is changed (dtardon)

  - Resolves: rhbz#553929 [abrt] crash in     ColorConfigCtrl_Impl::ScrollHdl (dtardon)

  - Resolves: rbhz#555257 openoffice cannot use JPEG images     using CMYK colorspace (dtardon)

  - Resolves: rhbz#558342 [abrt] crash in     SvxNumOptionsTabPage::InitControls (dtardon)

  - Tue Dec 15 2009 Caolan McNamara <caolanm at redhat.com>
    - 1:3.1.1-19.11

    - Resolves: rhbz#529648 add workspace.fwk132.patch

    - Wed Dec 9 2009 Caolan McNamara <caolanm at redhat.com>
      - 1:3.1.1-19.10

    - Resolves: rhbz#545783 add workspace.vcl105.patch       (caolanm)

    - Wed Dec 9 2009 Caolan McNamara <caolanm at redhat.com>
      - 1:3.1.1-19.9

    - add       openoffice.org-4.2.0.ooo107151.sc.pop-empty-cell.patch       (dtardon)

    - Resolves: rhbz#533538 OpenOffice keyboard shortcuts       mis-map in the Spanish localized version of OOo       (caolanm)

  - Tue Nov 10 2009 Caolan McNamara <caolanm at redhat.com>
    - 1:3.1.1-19.8

    - Resolves: rhbz#533841 ooo#105710 svx       loadstorenumbering (caolanm)

    - Thu Nov 5 2009 Caolan McNamara <caolanm at redhat.com>
      - 1:3.1.1-19.7

    - Resolves: ooo#106523 fix pdf/A export on x86_64       (caolanm)

    - Thu Nov 5 2009 Caolan McNamara <caolanm at redhat.com>
      - 1:3.1.1-19.6

    - Resolves: rhbz#533146 calc notes go missing on save

    - Wed Oct 28 2009 Caolan McNamara <caolanm at       redhat.com> - 1:3.1.1-19.5

    - Resolves: rhbz#531554 add workspace.chart41.patch

    - Wed Oct 21 2009 Caolan McNamara <caolanm at       redhat.com> - 1:3.1.1-19.4

    - Resolves: rhbz#522839 crash on exit after loading .doc

    - Resolves: rhbz#529746 crash on exit after loading .ppt

    - Mon Sep 7 2009 Caolan McNamara <caolanm at redhat.com>
      - 1:3.1.1-19.3

    - Resolves: rhbz#521460 - wrong UI label for A3/A5 page       sizes in translations

    - Wed Sep 2 2009 Caolan McNamara <caolanm at redhat.com>
      - 1:3.1.1-19.2

    - Resolves: rhbz#520772 copy/paste cockup

    - Fri Aug 28 2009 Caolan McNamara <caolanm at       redhat.com> - 1:3.1.1-19.1

    - update to 3.1.1

    - Resolves: rhbz#512355 add       openoffice.org-3.1.0.ooo103651.canvas.nosubpixel.patc

    - add workspace.os132.patch to avoid switch html view       overwrite horror

    - Resolves: rhbz#517843 add       openoffice.org-3.1.1.ooo104306.moverecentlyused.patch

    - Resolves: rhbz#514683 add       openoffice.org-3.1.1.ooo104329.dbaccess.primarykeys.pa       tch

    - Resolves: rbhz#501141 Images and Frames disappear in       sequential printing

    - backport workspace.vcl102.patch to fix xdg support

    - add workspace.cmcfixes62.patch for 64bit odbc goodness       and rebuild against now 64bit-safe unixODBC headers

  - Thu Jul 9 2009 Caolan McNamara <caolanm at redhat.com> -     1:3.1.0-11.5

[plus 13 lines in the Changelog]

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Sun Microsystems OpenOffice.org installed on the remote host is prior to version 3.2. It is, therefore, affected by several issues :

  - Signatures may not be handled properly due to a     vulnerability in the libxml2 library. (CVE-2006-4339)

  - There is an HMAC truncation authentication bypass     vulnerability in the libxmlsec library. (CVE-2009-0217)

  - The application is bundled with a vulnerable version of     the Microsoft VC++ runtime. (CVE-2009-2493)

  - Specially crafted XPM files are not processed properly,     which could lead to arbitrary code execution.
    (CVE-2009-2949)

  - Specially crafted GIF files are not processed properly,     which could lead to arbitrary code execution.
    (CVE-2009-2950)

  - Specially crafted Microsoft Word documents are not     processed properly, which could lead to arbitrary code     execution. (CVE-2009-3301 / CVE-2009-3302)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
45064	SuSE 11 Security Update : OpenOffice_org (SAT Patch Number 2080)	Nessus	SuSE Local Security Checks	2010/3/16	2021/1/14	high
47276	Fedora 12 : openoffice.org-3.1.1-19.26.fc12 (2010-1847)	Nessus	Fedora Local Security Checks	2010/7/1	2021/1/11	high
51684	SuSE 10 Security Update : OpenOffice_org (ZYPP Patch Number 6883)	Nessus	SuSE Local Security Checks	2011/1/27	2021/1/14	high
60733	Scientific Linux Security Update : openoffice.org on SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
44859	Debian DSA-1995-1 : openoffice.org - several vulnerabilities	Nessus	Debian Local Security Checks	2010/2/24	2021/1/4	high
47289	Fedora 11 : openoffice.org-3.1.1-19.12.fc11 (2010-1941)	Nessus	Fedora Local Security Checks	2010/7/1	2021/1/11	high
51594	SuSE 11 Security Update : OpenOffice_org (SAT Patch Number 2080)	Nessus	SuSE Local Security Checks	2011/1/21	2021/1/14	high
51685	SuSE 10 Security Update : OpenOffice_org (ZYPP Patch Number 6884)	Nessus	SuSE Local Security Checks	2011/1/27	2021/1/14	high
44597	Sun OpenOffice.org < 3.2 Multiple Vulnerabilities	Nessus	Windows	2010/2/12	2018/7/16	high

检测

插件搜索

high

high

high

high

high

high

high

high

high