Red Hat Security AdvisoryRHSA-2008:0175
openoffice.org security update
Released 2008-04-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 openoffice.org2-1:2.0.4-5.7.0.4.0, openoffice.org2-base-1:2.0.4-5.7.0.4.0.i386, openoffice.org2-base-1:2.0.4-5.7.0.4.0.ppc +47
- Red Hat Enterprise Linux Desktop (v. 5 client) openoffice.org-1:2.0.4-5.4.26, openoffice.org-base-1:2.0.4-5.4.26, openoffice.org-base-1:2.0.4-5.4.26.i386 +47
- Red Hat Enterprise Linux Desktop version 4 openoffice.org2-1:2.0.4-5.7.0.4.0, openoffice.org2-base-1:2.0.4-5.7.0.4.0.i386, openoffice.org2-calc-1:2.0.4-5.7.0.4.0.i386 +47
- Red Hat Enterprise Linux ES version 4 openoffice.org2-1:2.0.4-5.7.0.4.0, openoffice.org2-base-1:2.0.4-5.7.0.4.0.i386, openoffice.org2-calc-1:2.0.4-5.7.0.4.0.i386 +47
- Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) openoffice.org-1:2.0.4-5.4.26, openoffice.org-base-1:2.0.4-5.4.26, openoffice.org-base-1:2.0.4-5.4.26.i386 +47
- Red Hat Enterprise Linux WS version 4 openoffice.org2-1:2.0.4-5.7.0.4.0, openoffice.org2-base-1:2.0.4-5.7.0.4.0.i386, openoffice.org2-calc-1:2.0.4-5.7.0.4.0.i386 +47
Fixes 4 records
Priority HIGH 73
Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryI…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.56864 · Published 2008-04-17 · Fixed CWE-119
Priority LOW 38
Integer overflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an EMF file with a crafted EMR_STRETCHBLT record, which triggers a heap-b…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04647 · Published 2008-04-17 · Fixed CWE-189
Priority LOW 37
Integer underflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted values that trigger an excessive…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04105 · Published 2008-04-17 · Fixed CWE-189
Priority LOW 37
Multiple heap-based buffer overflows in OpenOffice.org before 2.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted (1) Attribute a…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04105 · Published 2008-04-17 · Fixed CWE-119
THREATIST.IORead the docs