Forum - Computer security: vulnerabilities and exploits database

[EN] securityvulns.ru
no-pyccku

OpenOffice multiple security vulnerabilities
updated since 02.09.2009
Published: 07.09.2009
Source: BUGTRAQ
SecurityVulns ID: 10195
Type: local
Level: 6/10
Description: Buffer overflow and integer overflow on Microsoft Word and EMF documents parsing, vulnerable version in included VCRedist_x86.

Affected: OPENOFFICE : OpenOffice 3.1
CVE: CVE-2009-2139 (Heap-based buffer overflow in svtools/source/filter.vcl/wmf/enhwmf.cxx in Go-oo 2.x and 3.x before 3.0.1, previously named ooo-build and related to OpenOffice.org (OOo), allows remote attackers to execute arbitrary code via a crafted EMF file, a similar issue to CVE-2008-2238.)
CVE-2009-0201 (Heap-based buffer overflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via unspecified records in a crafted Word document, related to "table parsing.")
CVE-2009-0200 (Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer overflow.)

Original document DEBIAN, [SECURITY] [DSA 1880-1] New OpenOffice.org packages fix arbitrary code execution (07.09.2009)

SECUNIA, Secunia Research: OpenOffice.org Word Document Table Parsing Integer Underflow (02.09.2009)

SECUNIA, Secunia Research: OpenOffice.org Word Document Table Parsing Integer Underflow (02.09.2009)

SECUNIA, Secunia Research: OpenOffice.org Word Document Table Parsing Buffer Overflow (02.09.2009)

Stefan Kanthak, Vulnerable MSVC++ runtime distributed with OpenOffice.org 3.1.1 for Windows (02.09.2009)

Discuss: Read or add your comments to this news (0 comments)

Show		Threads
		Messages


Login:*		(Register)
Password:*
(private)	To:
(reply)	Subject:*
Text:

Main Forum (Eng) General security questions not appropriate for another forums.	3proxy Forum (Eng) All 3proxy question must be posted to this forum.	Bugs, Vulnerabilities, PoCs and Exploits (Eng) All vulnerability related questions, vulnerability digging and exploit creation.	Windows programming and administration (Eng) Administering Windows and application development.	Unix programming and administation (Eng) Administering Unix and application development.	Test forum Please post all test messages here. All test messages from different forums will be deteted.
Main Forum (Rus)	3proxy Forum (Rus)	Bugs, Vulnerabilities, PoCs and Exploits (Rus)	Windows programming and administration (Rus)	Unix programming and administation (Rus)