Rapid7 VulnDB

RHSA-2011:0181: openoffice.org and openoffice.org2 security update

Back to Search

RHSA-2011:0181: openoffice.org and openoffice.org2 security update

Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
01/28/2011
Created
07/25/2018
Added
01/31/2011
Modified
07/04/2017

Description

OpenOffice.org is an office productivity suite that includes desktopapplications, such as a word processor, spreadsheet application,presentation manager, formula editor, and a drawing program.An array index error and an integer signedness error were found in the wayOpenOffice.org parsed certain Rich Text Format (RTF) files. An attackercould use these flaws to create a specially-crafted RTF file that, whenopened, would cause OpenOffice.org to crash or, possibly, execute arbitrarycode with the privileges of the user running OpenOffice.org.(CVE-2010-3451, CVE-2010-3452)A heap-based buffer overflow flaw and an array index error were found inthe way OpenOffice.org parsed certain Microsoft Office Word documents. Anattacker could use these flaws to create a specially-crafted MicrosoftOffice Word document that, when opened, would cause OpenOffice.org to crashor, possibly, execute arbitrary code with the privileges of the userrunning OpenOffice.org. (CVE-2010-3453, CVE-2010-3454)A heap-based buffer overflow flaw was found in the way OpenOffice.orgparsed certain TARGA (Truevision TGA) files. An attacker could use thisflaw to create a specially-crafted TARGA file. If a document containingthis specially-crafted TARGA file was opened, or if a user tried to insertthe file into an existing document, it would cause OpenOffice.org to crashor, possibly, execute arbitrary code with the privileges of the userrunning OpenOffice.org. (CVE-2010-4643)A directory traversal flaw was found in the way OpenOffice.org handledthe installation of XSLT filter descriptions packaged in Java Archive (JAR)files, as well as the installation of OpenOffice.org Extension (.oxt)files. An attacker could use these flaws to create a specially-crafted XSLTfilter description or extension file that, when opened, would cause theOpenOffice.org Extension Manager to modify files accessible to the userinstalling the JAR or extension file. (CVE-2010-3450)Red Hat would like to thank OpenOffice.org for reporting the CVE-2010-3451,CVE-2010-3452, CVE-2010-3453, CVE-2010-3454, and CVE-2010-4643 issues.Upstream acknowledges Dan Rosenberg of Virtual Security Research as theoriginal reporter of the CVE-2010-3451, CVE-2010-3452, CVE-2010-3453, andCVE-2010-3454 issues.All OpenOffice.org users are advised to upgrade to these updated packages,which contain backported patches to correct these issues. All runninginstances of OpenOffice.org applications must be restarted for this updateto take effect.

Solution(s)

  • redhat-upgrade-openoffice-org
  • redhat-upgrade-openoffice-org-i18n
  • redhat-upgrade-openoffice-org-kde
  • redhat-upgrade-openoffice-org-libs
  • redhat-upgrade-openoffice-org2-base
  • redhat-upgrade-openoffice-org2-calc
  • redhat-upgrade-openoffice-org2-core
  • redhat-upgrade-openoffice-org2-draw
  • redhat-upgrade-openoffice-org2-emailmerge
  • redhat-upgrade-openoffice-org2-graphicfilter
  • redhat-upgrade-openoffice-org2-impress
  • redhat-upgrade-openoffice-org2-javafilter
  • redhat-upgrade-openoffice-org2-langpack-af_za
  • redhat-upgrade-openoffice-org2-langpack-ar
  • redhat-upgrade-openoffice-org2-langpack-bg_bg
  • redhat-upgrade-openoffice-org2-langpack-bn
  • redhat-upgrade-openoffice-org2-langpack-ca_es
  • redhat-upgrade-openoffice-org2-langpack-cs_cz
  • redhat-upgrade-openoffice-org2-langpack-cy_gb
  • redhat-upgrade-openoffice-org2-langpack-da_dk
  • redhat-upgrade-openoffice-org2-langpack-de
  • redhat-upgrade-openoffice-org2-langpack-el_gr
  • redhat-upgrade-openoffice-org2-langpack-es
  • redhat-upgrade-openoffice-org2-langpack-et_ee
  • redhat-upgrade-openoffice-org2-langpack-eu_es
  • redhat-upgrade-openoffice-org2-langpack-fi_fi
  • redhat-upgrade-openoffice-org2-langpack-fr
  • redhat-upgrade-openoffice-org2-langpack-ga_ie
  • redhat-upgrade-openoffice-org2-langpack-gl_es
  • redhat-upgrade-openoffice-org2-langpack-gu_in
  • redhat-upgrade-openoffice-org2-langpack-he_il
  • redhat-upgrade-openoffice-org2-langpack-hi_in
  • redhat-upgrade-openoffice-org2-langpack-hr_hr
  • redhat-upgrade-openoffice-org2-langpack-hu_hu
  • redhat-upgrade-openoffice-org2-langpack-it
  • redhat-upgrade-openoffice-org2-langpack-ja_jp
  • redhat-upgrade-openoffice-org2-langpack-ko_kr
  • redhat-upgrade-openoffice-org2-langpack-lt_lt
  • redhat-upgrade-openoffice-org2-langpack-ms_my
  • redhat-upgrade-openoffice-org2-langpack-nb_no
  • redhat-upgrade-openoffice-org2-langpack-nl
  • redhat-upgrade-openoffice-org2-langpack-nn_no
  • redhat-upgrade-openoffice-org2-langpack-pa_in
  • redhat-upgrade-openoffice-org2-langpack-pl_pl
  • redhat-upgrade-openoffice-org2-langpack-pt_br
  • redhat-upgrade-openoffice-org2-langpack-pt_pt
  • redhat-upgrade-openoffice-org2-langpack-ru
  • redhat-upgrade-openoffice-org2-langpack-sk_sk
  • redhat-upgrade-openoffice-org2-langpack-sl_si
  • redhat-upgrade-openoffice-org2-langpack-sr_cs
  • redhat-upgrade-openoffice-org2-langpack-sv
  • redhat-upgrade-openoffice-org2-langpack-ta_in
  • redhat-upgrade-openoffice-org2-langpack-th_th
  • redhat-upgrade-openoffice-org2-langpack-tr_tr
  • redhat-upgrade-openoffice-org2-langpack-zh_cn
  • redhat-upgrade-openoffice-org2-langpack-zh_tw
  • redhat-upgrade-openoffice-org2-langpack-zu_za
  • redhat-upgrade-openoffice-org2-math
  • redhat-upgrade-openoffice-org2-pyuno
  • redhat-upgrade-openoffice-org2-testtools
  • redhat-upgrade-openoffice-org2-writer
  • redhat-upgrade-openoffice-org2-xsltfilter

References

  • redhat-upgrade-openoffice-org
  • redhat-upgrade-openoffice-org-i18n
  • redhat-upgrade-openoffice-org-kde
  • redhat-upgrade-openoffice-org-libs
  • redhat-upgrade-openoffice-org2-base
  • redhat-upgrade-openoffice-org2-calc
  • redhat-upgrade-openoffice-org2-core
  • redhat-upgrade-openoffice-org2-draw
  • redhat-upgrade-openoffice-org2-emailmerge
  • redhat-upgrade-openoffice-org2-graphicfilter
  • redhat-upgrade-openoffice-org2-impress
  • redhat-upgrade-openoffice-org2-javafilter
  • redhat-upgrade-openoffice-org2-langpack-af_za
  • redhat-upgrade-openoffice-org2-langpack-ar
  • redhat-upgrade-openoffice-org2-langpack-bg_bg
  • redhat-upgrade-openoffice-org2-langpack-bn
  • redhat-upgrade-openoffice-org2-langpack-ca_es
  • redhat-upgrade-openoffice-org2-langpack-cs_cz
  • redhat-upgrade-openoffice-org2-langpack-cy_gb
  • redhat-upgrade-openoffice-org2-langpack-da_dk
  • redhat-upgrade-openoffice-org2-langpack-de
  • redhat-upgrade-openoffice-org2-langpack-el_gr
  • redhat-upgrade-openoffice-org2-langpack-es
  • redhat-upgrade-openoffice-org2-langpack-et_ee
  • redhat-upgrade-openoffice-org2-langpack-eu_es
  • redhat-upgrade-openoffice-org2-langpack-fi_fi
  • redhat-upgrade-openoffice-org2-langpack-fr
  • redhat-upgrade-openoffice-org2-langpack-ga_ie
  • redhat-upgrade-openoffice-org2-langpack-gl_es
  • redhat-upgrade-openoffice-org2-langpack-gu_in
  • redhat-upgrade-openoffice-org2-langpack-he_il
  • redhat-upgrade-openoffice-org2-langpack-hi_in
  • redhat-upgrade-openoffice-org2-langpack-hr_hr
  • redhat-upgrade-openoffice-org2-langpack-hu_hu
  • redhat-upgrade-openoffice-org2-langpack-it
  • redhat-upgrade-openoffice-org2-langpack-ja_jp
  • redhat-upgrade-openoffice-org2-langpack-ko_kr
  • redhat-upgrade-openoffice-org2-langpack-lt_lt
  • redhat-upgrade-openoffice-org2-langpack-ms_my
  • redhat-upgrade-openoffice-org2-langpack-nb_no
  • redhat-upgrade-openoffice-org2-langpack-nl
  • redhat-upgrade-openoffice-org2-langpack-nn_no
  • redhat-upgrade-openoffice-org2-langpack-pa_in
  • redhat-upgrade-openoffice-org2-langpack-pl_pl
  • redhat-upgrade-openoffice-org2-langpack-pt_br
  • redhat-upgrade-openoffice-org2-langpack-pt_pt
  • redhat-upgrade-openoffice-org2-langpack-ru
  • redhat-upgrade-openoffice-org2-langpack-sk_sk
  • redhat-upgrade-openoffice-org2-langpack-sl_si
  • redhat-upgrade-openoffice-org2-langpack-sr_cs
  • redhat-upgrade-openoffice-org2-langpack-sv
  • redhat-upgrade-openoffice-org2-langpack-ta_in
  • redhat-upgrade-openoffice-org2-langpack-th_th
  • redhat-upgrade-openoffice-org2-langpack-tr_tr
  • redhat-upgrade-openoffice-org2-langpack-zh_cn
  • redhat-upgrade-openoffice-org2-langpack-zh_tw
  • redhat-upgrade-openoffice-org2-langpack-zu_za
  • redhat-upgrade-openoffice-org2-math
  • redhat-upgrade-openoffice-org2-pyuno
  • redhat-upgrade-openoffice-org2-testtools
  • redhat-upgrade-openoffice-org2-writer
  • redhat-upgrade-openoffice-org2-xsltfilter

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;