GLSA Administrator
Joined: 27 Jun 2003 Posts: 4975 Location: Gothenburg, Sweden
|
Posted: Fri Apr 15, 2005 4:41 pm Post subject: [ GLSA 200504-13 ] OpenOffice.Org: DOC document Heap Overflo |
|
|
Gentoo Linux Security Advisory
Title: OpenOffice.Org: DOC document Heap Overflow (GLSA 200504-13)
Severity: normal
Exploitable: remote
Date: April 15, 2005
Updated: May 08, 2005
Bug(s): #88863
ID: 200504-13
Synopsis
OpenOffice.Org is vulnerable to a heap overflow when processing DOC documents, which could lead to arbitrary code execution.
Background
OpenOffice.org is an office productivity suite, including word processing, spreadsheets, presentations, drawings, data charting, formula editing, and file conversion facilities.
Affected Packages
Package: app-office/openoffice
Vulnerable: < 1.1.4-r1
Unaffected: >= 1.1.4-r1
Architectures: All supported architectures
Package: app-office/openoffice-bin
Vulnerable: < 1.1.4-r1
Unaffected: >= 1.1.4-r1
Architectures: All supported architectures
Package: app-office/openoffice-ximian
Vulnerable: < 1.3.9-r1
Unaffected: >= 1.3.9-r1
Unaffected: >= 1.3.6-r1 < 1.3.7
Unaffected: >= 1.3.7-r1 < 1.3.8
Architectures: All supported architectures
Description
AD-LAB has discovered a heap overflow in the "StgCompObjStream::Load()" function when processing DOC documents.
Impact
An attacker could design a malicious DOC document containing a specially crafted header which, when processed by OpenOffice.Org, would result in the execution of arbitrary code with the rights of the user running the application.
Workaround
There is no known workaround at this time.
Resolution
All OpenOffice.Org users should upgrade to the latest version: Code: | # emerge --sync
# emerge --ask --oneshot --verbose ">=app-office/openoffice-1.1.4-r1" | All OpenOffice.Org binary users should upgrade to the latest version: Code: | # emerge --sync
# emerge --ask --oneshot --verbose ">=app-office/openoffice-bin-1.1.4-r1" | All OpenOffice.Org Ximian users should upgrade to the latest version: Code: | # emerge --sync
# emerge --ask --oneshot --verbose app-office/openoffice-ximian | Note to PPC users: There is no stable OpenOffice.Org fixed version for the PPC architecture. Affected users should switch to the latest OpenOffice.Org Ximian version. Note to SPARC users: There is no stable OpenOffice.Org fixed version for the SPARC architecture. Affected users should switch to the latest OpenOffice.Org Ximian version.
References
OpenOffice.Org Issue 46388
CAN-2005-0941
Last edited by GLSA on Sun May 07, 2006 4:56 pm; edited 1 time in total |
|