SCIENTIFIC-LINUX-ERRATA Archives

January 2011

SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Security ERRATA Important: openoffice.org on SL5.x i386/x86_64
From:
Troy Dawson <[log in to unmask]>
Reply To:
Troy Dawson <[log in to unmask]>
Date:
Mon, 31 Jan 2011 15:27:52 -0600
Content-Type:
text/plain
Parts/Attachments:
text/plain (218 lines) 
Synopsis:	Important: openoffice.org security update

Issue date:	2011-01-28

CVE Names:	CVE-2010-3450 CVE-2010-3451 CVE-2010-3452

                   CVE-2010-3453 CVE-2010-3454 CVE-2010-3689

                   CVE-2010-4253 CVE-2010-4643



An array index error and an integer signedness error were found in the 

way OpenOffice.org parsed certain Rich Text Format (RTF) files. An 

attacker could use these flaws to create a specially-crafted RTF file 

that, when opened, would cause OpenOffice.org to crash or, possibly, 

execute arbitrary code with the privileges of the user running 

OpenOffice.org. (CVE-2010-3451, CVE-2010-3452)



A heap-based buffer overflow flaw and an array index error were found in

the way OpenOffice.org parsed certain Microsoft Office Word documents. 

An attacker could use these flaws to create a specially-crafted 

Microsoft Office Word document that, when opened, would cause 

OpenOffice.org to crash or, possibly, execute arbitrary code with the 

privileges of the user running OpenOffice.org. (CVE-2010-3453, 

CVE-2010-3454)



A heap-based buffer overflow flaw was found in the way OpenOffice.org

parsed certain Microsoft Office PowerPoint files. An attacker could use

this flaw to create a specially-crafted Microsoft Office PowerPoint file

that, when opened, would cause OpenOffice.org to crash or, possibly,

execute arbitrary code with the privileges of the user running

OpenOffice.org. (CVE-2010-4253)



A heap-based buffer overflow flaw was found in the way OpenOffice.org

parsed certain TARGA (Truevision TGA) files. An attacker could use this

flaw to create a specially-crafted TARGA file. If a document containing

this specially-crafted TARGA file was opened, or if a user tried to 

insert the file into an existing document, it would cause OpenOffice.org 

to crash or, possibly, execute arbitrary code with the privileges of the 

user running OpenOffice.org. (CVE-2010-4643)



A directory traversal flaw was found in the way OpenOffice.org handled 

the installation of XSLT filter descriptions packaged in Java Archive 

(JAR) files, as well as the installation of OpenOffice.org Extension 

(.oxt) files. An attacker could use these flaws to create a 

specially-crafted XSLT filter description or extension file that, when 

opened, would cause the OpenOffice.org Extension Manager to modify files 

accessible to the user installing the JAR or extension file. (CVE-2010-3450)



A flaw was found in the script that launches OpenOffice.org. In some

situations, a "." character could be included in the LD_LIBRARY_PATH

variable, allowing a local attacker to execute arbitrary code with the

privileges of the user running OpenOffice.org, if that user ran

OpenOffice.org from within an attacker-controlled directory.

(CVE-2010-3689)



All running instances of OpenOffice.org applications must be restarted 

for this update to take effect.



SL 5.x



     SRPMS:

openoffice.org-3.1.1-19.5.el5_5.6.src.rpm

     i386:

openoffice.org-base-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-calc-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-core-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-draw-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-emailmerge-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-graphicfilter-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-headless-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-impress-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-javafilter-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-af_ZA-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-ar-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-as_IN-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-bg_BG-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-bn-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-ca_ES-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-cs_CZ-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-cy_GB-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-da_DK-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-de-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-el_GR-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-es-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-et_EE-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-eu_ES-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-fi_FI-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-fr-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-ga_IE-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-gl_ES-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-gu_IN-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-he_IL-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-hi_IN-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-hr_HR-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-hu_HU-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-it-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-ja_JP-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-kn_IN-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-ko_KR-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-lt_LT-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-ml_IN-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-mr_IN-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-ms_MY-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-nb_NO-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-nl-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-nn_NO-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-nr_ZA-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-nso_ZA-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-or_IN-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-pa_IN-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-pl_PL-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-pt_BR-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-pt_PT-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-ru-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-sk_SK-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-sl_SI-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-sr_CS-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-ss_ZA-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-st_ZA-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-sv-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-ta_IN-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-te_IN-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-th_TH-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-tn_ZA-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-tr_TR-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-ts_ZA-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-ur-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-ve_ZA-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-xh_ZA-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-zh_CN-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-zh_TW-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-langpack-zu_ZA-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-math-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-pyuno-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-sdk-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-sdk-doc-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-testtools-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-ure-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-writer-3.1.1-19.5.el5_5.6.i386.rpm

openoffice.org-xsltfilter-3.1.1-19.5.el5_5.6.i386.rpm

     x86_64:

openoffice.org-base-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-calc-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-core-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-draw-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-emailmerge-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-graphicfilter-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-headless-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-impress-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-javafilter-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-af_ZA-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-ar-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-as_IN-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-bg_BG-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-bn-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-ca_ES-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-cs_CZ-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-cy_GB-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-da_DK-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-de-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-el_GR-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-es-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-et_EE-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-eu_ES-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-fi_FI-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-fr-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-ga_IE-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-gl_ES-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-gu_IN-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-he_IL-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-hi_IN-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-hr_HR-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-hu_HU-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-it-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-ja_JP-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-kn_IN-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-ko_KR-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-lt_LT-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-ml_IN-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-mr_IN-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-ms_MY-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-nb_NO-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-nl-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-nn_NO-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-nr_ZA-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-nso_ZA-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-or_IN-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-pa_IN-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-pl_PL-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-pt_BR-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-pt_PT-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-ru-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-sk_SK-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-sl_SI-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-sr_CS-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-ss_ZA-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-st_ZA-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-sv-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-ta_IN-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-te_IN-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-th_TH-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-tn_ZA-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-tr_TR-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-ts_ZA-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-ur-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-ve_ZA-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-xh_ZA-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-zh_CN-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-zh_TW-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-langpack-zu_ZA-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-math-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-pyuno-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-sdk-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-sdk-doc-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-testtools-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-ure-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-writer-3.1.1-19.5.el5_5.6.x86_64.rpm

openoffice.org-xsltfilter-3.1.1-19.5.el5_5.6.x86_64.rpm



-Connie Sieh

-Troy Dawson

ATOM RSS1 RSS2