Red Hat Security AdvisoryRHSA-2011:0181
openoffice.org and openoffice.org2 security update
Released 2011-01-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 openoffice.org-1.1.5-10.7.el4_8.10, openoffice.org-1.1.5-10.7.el4_8.10.i386, openoffice.org-1.1.5-10.7.el4_8.10.ppc +47
- Red Hat Enterprise Linux Desktop version 4 openoffice.org-1.1.5-10.7.el4_8.10, openoffice.org-1.1.5-10.7.el4_8.10.i386, openoffice.org-i18n-1.1.5-10.7.el4_8.10.i386 +47
- Red Hat Enterprise Linux ES version 4 openoffice.org-1.1.5-10.7.el4_8.10, openoffice.org-1.1.5-10.7.el4_8.10.i386, openoffice.org-i18n-1.1.5-10.7.el4_8.10.i386 +47
- Red Hat Enterprise Linux WS version 4 openoffice.org-1.1.5-10.7.el4_8.10, openoffice.org-1.1.5-10.7.el4_8.10.i386, openoffice.org-i18n-1.1.5-10.7.el4_8.10.i386 +47
Fixes 6 records
Priority MEDIUM 53
Multiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to cause a denial of service (application crash) or possibly exec…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.10274 · Published 2011-01-28 · Fixed CWE-193
Priority MEDIUM 53
Use-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted tags in an R…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.10274 · Published 2011-01-28 · Fixed CWE-416
Priority MEDIUM 53
Use-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via malformed tables in…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.10274 · Published 2011-01-28 · Fixed CWE-416
Priority MEDIUM 53
Multiple directory traversal vulnerabilities in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to overwrite arbitrary files via a ..
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.10731 · Published 2011-01-28 · Fixed CWE-22
Priority MEDIUM 52
Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Truevision TG…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.10102 · Published 2011-01-28 · Fixed CWE-787
Priority MEDIUM 52
The WW8ListManager::WW8ListManager function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle an unspecified number of list levels in user-defined list styles in WW8 data in a Microsoft…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.09672 · Published 2011-01-28 · Fixed CWE-787
THREATIST.IORead the docs