From: Secunia Security Advisories (sec-advsecunia.com)
Date: Fri Jun 30 2006 - 04:32:05 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

----------------------------------------------------------------------

Reverse Engineer Wanted

Secunia offers a Security Specialist position with emphasis on
reverse engineering of software and exploit code, auditing of
source code, and analysis of vulnerability reports.

http://secunia.com/secunia_security_specialist/

----------------------------------------------------------------------

TITLE:
OpenOffice Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA20867

VERIFY ADVISORY:
http://secunia.com/advisories/20867/

CRITICAL:
Moderately critical

IMPACT:
System access

WHERE:
From remote

SOFTWARE:
OpenOffice.org 2.x
http://secunia.com/product/6157/
OpenOffice 1.1.x
http://secunia.com/product/302/

DESCRIPTION:
Some vulnerabilities have been reported in OpenOffice, which can be
exploited by malicious people to compromise a user's system.

1) An error exists within the handling of certain Java applets in
OpenOffice documents. This can exploited by malicious Java applets to
bypass sandbox restrictions and gain full access to system resources
with current user privileges.

2) An error exists within the handling of Macros embedded in
documents. This can be exploited to execute arbitrary Basic code with
full access to system resources without any user notification, when a
malicious document is opened.

3) A boundary error exists within the handling of certain XML
documents. This can be exploited to cause a buffer overflow and may
allow arbitrary code execution when a specially crafted XML document
is opened.

The vulnerabilities have been reported in version 1.1.x and 2.0.x.

SOLUTION:
Update to the fixed version or apply patches when available.

OpenOffice 2.0.x:
Update to version 2.0.3.
http://download.openoffice.org/2.0.3/index.html

OpenOffice 1.1.x:
A patch for version 1.1.5 will reportedly be released shortly. The
vendor recommends disabling Java Applets as a workaround for
vulnerability #1.

PROVIDED AND/OR DISCOVERED BY:
Reported by vendor.

ORIGINAL ADVISORY:
http://www.openoffice.org/security/bulletin-20060629.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]