Login
Newsletter
Werbung

Sicherheit: Ausführen beliebiger Kommandos in openoffice.org
Aktuelle Meldungen Distributionen
Name: Ausführen beliebiger Kommandos in openoffice.org
ID: MDKSA-2007:064
Distribution: Mandriva
Plattformen: Mandriva 2007.0
Datum: Fr, 16. März 2007, 21:47
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0002
Applikationen: Apache OpenOffice

Originalnachricht

This is a multi-part message in MIME format...

------------=_1174078068-8862-1639


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDKSA-2007:064
http://www.mandriva.com/security/
_______________________________________________________________________

Package : openoffice.org
Date : March 16, 2007
Affected: 2007.0
_______________________________________________________________________

Problem Description:

iDefense reported several overflow bugs in libwpd. An attacker
could create a carefully crafted Word Perfect file that could cause
an application linked with libwpd, such as OpenOffice, to crash or
possibly execute arbitrary code if the file was opened by a victim.

OpenOffice.org-2.X contains an embedded copy of libpwd, and as such
is susceptible to the same issues.

Updated packages have been rebuilt using the system libwpd to address
this issue.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0002
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2007.0:
5d5eb8205f8290efeebf6df5d54dfbce
2007.0/i586/openoffice.org-2.0.4-2.2mdv2007.0.i586.rpm
1d317012e41f3fd7f9454aaa86f50bad
2007.0/i586/openoffice.org-devel-2.0.4-2.2mdv2007.0.i586.rpm
637be68b0e1e7c88bdb718069e777df3
2007.0/i586/openoffice.org-devel-doc-2.0.4-2.2mdv2007.0.i586.rpm
5470a8b2bc65eee8fa178697e2c347f4
2007.0/i586/openoffice.org-galleries-2.0.4-2.2mdv2007.0.i586.rpm
a4768177c5a7dab2943aa9a42c232f92
2007.0/i586/openoffice.org-gnome-2.0.4-2.2mdv2007.0.i586.rpm
ef38eae4f6fa6f3e987a272df5b313a1
2007.0/i586/openoffice.org-kde-2.0.4-2.2mdv2007.0.i586.rpm
e9411982da87c406d806380e4c931edc
2007.0/i586/openoffice.org-l10n-af-2.0.4-2.2mdv2007.0.i586.rpm
838dc6d746772da1853a210bae2c7427
2007.0/i586/openoffice.org-l10n-ar-2.0.4-2.2mdv2007.0.i586.rpm
4695517a1ec3cbb3c644602a724c6be8
2007.0/i586/openoffice.org-l10n-bg-2.0.4-2.2mdv2007.0.i586.rpm
03506b1e9bc6dd6294d7fbc185c693c6
2007.0/i586/openoffice.org-l10n-br-2.0.4-2.2mdv2007.0.i586.rpm
7c5b94bbf29cf5806736eee2acaf456b
2007.0/i586/openoffice.org-l10n-bs-2.0.4-2.2mdv2007.0.i586.rpm
020c7c43dd7c607e045569b29b2afa05
2007.0/i586/openoffice.org-l10n-ca-2.0.4-2.2mdv2007.0.i586.rpm
fa533d90295a38fb6f76cc3e172b3c39
2007.0/i586/openoffice.org-l10n-cs-2.0.4-2.2mdv2007.0.i586.rpm
d43e90e6fbbddff82139d0fab8fb05b1
2007.0/i586/openoffice.org-l10n-cy-2.0.4-2.2mdv2007.0.i586.rpm
1a6104101294335dfaaac63ce9b1bb2e
2007.0/i586/openoffice.org-l10n-da-2.0.4-2.2mdv2007.0.i586.rpm
16dc52cef9605fa437c028c3ade65370
2007.0/i586/openoffice.org-l10n-de-2.0.4-2.2mdv2007.0.i586.rpm
88f07f27199dae331fa409d55e7657b0
2007.0/i586/openoffice.org-l10n-el-2.0.4-2.2mdv2007.0.i586.rpm
c374882cdc260f20ffe9da683d28eaa4
2007.0/i586/openoffice.org-l10n-en_GB-2.0.4-2.2mdv2007.0.i586.rpm
c77ec8e96f9ebac6b362f9ae7a85243b
2007.0/i586/openoffice.org-l10n-es-2.0.4-2.2mdv2007.0.i586.rpm
6ffd6cb99f7820a3b3159339b4e6f091
2007.0/i586/openoffice.org-l10n-et-2.0.4-2.2mdv2007.0.i586.rpm
da51c02f184b8d042cdd539b5ab1d9df
2007.0/i586/openoffice.org-l10n-eu-2.0.4-2.2mdv2007.0.i586.rpm
b9027afa8d5065f6268e3a2f2eafef99
2007.0/i586/openoffice.org-l10n-fi-2.0.4-2.2mdv2007.0.i586.rpm
af00e262f720ded23a4e8aa559950e21
2007.0/i586/openoffice.org-l10n-fr-2.0.4-2.2mdv2007.0.i586.rpm
21acc2f8e89e359cc93095e4867ab30a
2007.0/i586/openoffice.org-l10n-he-2.0.4-2.2mdv2007.0.i586.rpm
5a9d8f4b0292102164c8d6c20f7ec6d7
2007.0/i586/openoffice.org-l10n-hi-2.0.4-2.2mdv2007.0.i586.rpm
8fe11ce71651936a914f65448d370022
2007.0/i586/openoffice.org-l10n-hu-2.0.4-2.2mdv2007.0.i586.rpm
37256f201cb2c811b0a4aa6b5d3d6dfb
2007.0/i586/openoffice.org-l10n-it-2.0.4-2.2mdv2007.0.i586.rpm
9d90cd1efc4c1bef927073686099edfe
2007.0/i586/openoffice.org-l10n-ja-2.0.4-2.2mdv2007.0.i586.rpm
5b3b8772e360b02c80e82dce0c20665c
2007.0/i586/openoffice.org-l10n-ko-2.0.4-2.2mdv2007.0.i586.rpm
8e6116b00d2c40de43ae59e5d2739d03
2007.0/i586/openoffice.org-l10n-mk-2.0.4-2.2mdv2007.0.i586.rpm
1ac887a0fd814313acbe7d11124398b3
2007.0/i586/openoffice.org-l10n-nb-2.0.4-2.2mdv2007.0.i586.rpm
4dc52063d87fa45fe90c28281075ea91
2007.0/i586/openoffice.org-l10n-nl-2.0.4-2.2mdv2007.0.i586.rpm
63d4e9b0650b4d2915dee5e5497fb0d4
2007.0/i586/openoffice.org-l10n-nn-2.0.4-2.2mdv2007.0.i586.rpm
00201452bb79c6448e801ad4d6944e49
2007.0/i586/openoffice.org-l10n-pl-2.0.4-2.2mdv2007.0.i586.rpm
c23b70692665785f78cbdaf8104e5287
2007.0/i586/openoffice.org-l10n-pt-2.0.4-2.2mdv2007.0.i586.rpm
22dc3dd41bfa522a0526d05fea100a2b
2007.0/i586/openoffice.org-l10n-pt_BR-2.0.4-2.2mdv2007.0.i586.rpm
ddc28c00d4a16e0a1a66519dec3d280f
2007.0/i586/openoffice.org-l10n-ru-2.0.4-2.2mdv2007.0.i586.rpm
799fda35029e1106991f6dca36ea132b
2007.0/i586/openoffice.org-l10n-sk-2.0.4-2.2mdv2007.0.i586.rpm
559f687220b5b1ecd8c68e424a9d2705
2007.0/i586/openoffice.org-l10n-sl-2.0.4-2.2mdv2007.0.i586.rpm
e116d69da439175f0b40420c55b15f9b
2007.0/i586/openoffice.org-l10n-sv-2.0.4-2.2mdv2007.0.i586.rpm
f1f5cfcd5cc7b3387019f83cb4934076
2007.0/i586/openoffice.org-l10n-ta-2.0.4-2.2mdv2007.0.i586.rpm
90b10a1602412c8c2483d3123fe4327e
2007.0/i586/openoffice.org-l10n-tr-2.0.4-2.2mdv2007.0.i586.rpm
8047d7daa7e3264df88f6bbba746313a
2007.0/i586/openoffice.org-l10n-zh_CN-2.0.4-2.2mdv2007.0.i586.rpm
f699d3d8c1bbf0fbe2ff8aec904229a4
2007.0/i586/openoffice.org-l10n-zh_TW-2.0.4-2.2mdv2007.0.i586.rpm
e4dee750047a48aa5a095ac2a382d627
2007.0/i586/openoffice.org-l10n-zu-2.0.4-2.2mdv2007.0.i586.rpm
17a628740c6d8c4f9850c9a25ebc63b1
2007.0/i586/openoffice.org-mimelnk-2.0.4-2.2mdv2007.0.i586.rpm
300e6679df04dcc693e0a17cea9fc927
2007.0/i586/openoffice.org-mono-2.0.4-2.2mdv2007.0.i586.rpm
9f1798def41c96b7643049aa2aaf4ce4
2007.0/i586/openoffice.org-ooqstart-2.0.4-2.2mdv2007.0.i586.rpm
3f4b35994146086e0e8f2c50a511fd9b
2007.0/SRPMS/openoffice.org-2.0.4-2.2mdv2007.0.src.rpm

Mandriva Linux 2007.0/X86_64:
5d5eb8205f8290efeebf6df5d54dfbce
2007.0/x86_64/openoffice.org-2.0.4-2.2mdv2007.0.i586.rpm
1d317012e41f3fd7f9454aaa86f50bad
2007.0/x86_64/openoffice.org-devel-2.0.4-2.2mdv2007.0.i586.rpm
637be68b0e1e7c88bdb718069e777df3
2007.0/x86_64/openoffice.org-devel-doc-2.0.4-2.2mdv2007.0.i586.rpm
5470a8b2bc65eee8fa178697e2c347f4
2007.0/x86_64/openoffice.org-galleries-2.0.4-2.2mdv2007.0.i586.rpm
a4768177c5a7dab2943aa9a42c232f92
2007.0/x86_64/openoffice.org-gnome-2.0.4-2.2mdv2007.0.i586.rpm
ef38eae4f6fa6f3e987a272df5b313a1
2007.0/x86_64/openoffice.org-kde-2.0.4-2.2mdv2007.0.i586.rpm
e9411982da87c406d806380e4c931edc
2007.0/x86_64/openoffice.org-l10n-af-2.0.4-2.2mdv2007.0.i586.rpm
838dc6d746772da1853a210bae2c7427
2007.0/x86_64/openoffice.org-l10n-ar-2.0.4-2.2mdv2007.0.i586.rpm
4695517a1ec3cbb3c644602a724c6be8
2007.0/x86_64/openoffice.org-l10n-bg-2.0.4-2.2mdv2007.0.i586.rpm
03506b1e9bc6dd6294d7fbc185c693c6
2007.0/x86_64/openoffice.org-l10n-br-2.0.4-2.2mdv2007.0.i586.rpm
7c5b94bbf29cf5806736eee2acaf456b
2007.0/x86_64/openoffice.org-l10n-bs-2.0.4-2.2mdv2007.0.i586.rpm
020c7c43dd7c607e045569b29b2afa05
2007.0/x86_64/openoffice.org-l10n-ca-2.0.4-2.2mdv2007.0.i586.rpm
fa533d90295a38fb6f76cc3e172b3c39
2007.0/x86_64/openoffice.org-l10n-cs-2.0.4-2.2mdv2007.0.i586.rpm
d43e90e6fbbddff82139d0fab8fb05b1
2007.0/x86_64/openoffice.org-l10n-cy-2.0.4-2.2mdv2007.0.i586.rpm
1a6104101294335dfaaac63ce9b1bb2e
2007.0/x86_64/openoffice.org-l10n-da-2.0.4-2.2mdv2007.0.i586.rpm
16dc52cef9605fa437c028c3ade65370
2007.0/x86_64/openoffice.org-l10n-de-2.0.4-2.2mdv2007.0.i586.rpm
88f07f27199dae331fa409d55e7657b0
2007.0/x86_64/openoffice.org-l10n-el-2.0.4-2.2mdv2007.0.i586.rpm
c374882cdc260f20ffe9da683d28eaa4
2007.0/x86_64/openoffice.org-l10n-en_GB-2.0.4-2.2mdv2007.0.i586.rpm
c77ec8e96f9ebac6b362f9ae7a85243b
2007.0/x86_64/openoffice.org-l10n-es-2.0.4-2.2mdv2007.0.i586.rpm
6ffd6cb99f7820a3b3159339b4e6f091
2007.0/x86_64/openoffice.org-l10n-et-2.0.4-2.2mdv2007.0.i586.rpm
da51c02f184b8d042cdd539b5ab1d9df
2007.0/x86_64/openoffice.org-l10n-eu-2.0.4-2.2mdv2007.0.i586.rpm
b9027afa8d5065f6268e3a2f2eafef99
2007.0/x86_64/openoffice.org-l10n-fi-2.0.4-2.2mdv2007.0.i586.rpm
af00e262f720ded23a4e8aa559950e21
2007.0/x86_64/openoffice.org-l10n-fr-2.0.4-2.2mdv2007.0.i586.rpm
21acc2f8e89e359cc93095e4867ab30a
2007.0/x86_64/openoffice.org-l10n-he-2.0.4-2.2mdv2007.0.i586.rpm
5a9d8f4b0292102164c8d6c20f7ec6d7
2007.0/x86_64/openoffice.org-l10n-hi-2.0.4-2.2mdv2007.0.i586.rpm
8fe11ce71651936a914f65448d370022
2007.0/x86_64/openoffice.org-l10n-hu-2.0.4-2.2mdv2007.0.i586.rpm
37256f201cb2c811b0a4aa6b5d3d6dfb
2007.0/x86_64/openoffice.org-l10n-it-2.0.4-2.2mdv2007.0.i586.rpm
9d90cd1efc4c1bef927073686099edfe
2007.0/x86_64/openoffice.org-l10n-ja-2.0.4-2.2mdv2007.0.i586.rpm
5b3b8772e360b02c80e82dce0c20665c
2007.0/x86_64/openoffice.org-l10n-ko-2.0.4-2.2mdv2007.0.i586.rpm
8e6116b00d2c40de43ae59e5d2739d03
2007.0/x86_64/openoffice.org-l10n-mk-2.0.4-2.2mdv2007.0.i586.rpm
1ac887a0fd814313acbe7d11124398b3
2007.0/x86_64/openoffice.org-l10n-nb-2.0.4-2.2mdv2007.0.i586.rpm
4dc52063d87fa45fe90c28281075ea91
2007.0/x86_64/openoffice.org-l10n-nl-2.0.4-2.2mdv2007.0.i586.rpm
63d4e9b0650b4d2915dee5e5497fb0d4
2007.0/x86_64/openoffice.org-l10n-nn-2.0.4-2.2mdv2007.0.i586.rpm
00201452bb79c6448e801ad4d6944e49
2007.0/x86_64/openoffice.org-l10n-pl-2.0.4-2.2mdv2007.0.i586.rpm
c23b70692665785f78cbdaf8104e5287
2007.0/x86_64/openoffice.org-l10n-pt-2.0.4-2.2mdv2007.0.i586.rpm
22dc3dd41bfa522a0526d05fea100a2b
2007.0/x86_64/openoffice.org-l10n-pt_BR-2.0.4-2.2mdv2007.0.i586.rpm
ddc28c00d4a16e0a1a66519dec3d280f
2007.0/x86_64/openoffice.org-l10n-ru-2.0.4-2.2mdv2007.0.i586.rpm
799fda35029e1106991f6dca36ea132b
2007.0/x86_64/openoffice.org-l10n-sk-2.0.4-2.2mdv2007.0.i586.rpm
559f687220b5b1ecd8c68e424a9d2705
2007.0/x86_64/openoffice.org-l10n-sl-2.0.4-2.2mdv2007.0.i586.rpm
e116d69da439175f0b40420c55b15f9b
2007.0/x86_64/openoffice.org-l10n-sv-2.0.4-2.2mdv2007.0.i586.rpm
f1f5cfcd5cc7b3387019f83cb4934076
2007.0/x86_64/openoffice.org-l10n-ta-2.0.4-2.2mdv2007.0.i586.rpm
90b10a1602412c8c2483d3123fe4327e
2007.0/x86_64/openoffice.org-l10n-tr-2.0.4-2.2mdv2007.0.i586.rpm
8047d7daa7e3264df88f6bbba746313a
2007.0/x86_64/openoffice.org-l10n-zh_CN-2.0.4-2.2mdv2007.0.i586.rpm
f699d3d8c1bbf0fbe2ff8aec904229a4
2007.0/x86_64/openoffice.org-l10n-zh_TW-2.0.4-2.2mdv2007.0.i586.rpm
e4dee750047a48aa5a095ac2a382d627
2007.0/x86_64/openoffice.org-l10n-zu-2.0.4-2.2mdv2007.0.i586.rpm
17a628740c6d8c4f9850c9a25ebc63b1
2007.0/x86_64/openoffice.org-mimelnk-2.0.4-2.2mdv2007.0.i586.rpm
300e6679df04dcc693e0a17cea9fc927
2007.0/x86_64/openoffice.org-mono-2.0.4-2.2mdv2007.0.i586.rpm
9f1798def41c96b7643049aa2aaf4ce4
2007.0/x86_64/openoffice.org-ooqstart-2.0.4-2.2mdv2007.0.i586.rpm
3f4b35994146086e0e8f2c50a511fd9b
2007.0/SRPMS/openoffice.org-2.0.4-2.2mdv2007.0.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFF+tItmqjQ0CJFipgRAp7uAJsFmk+UvDkB+C+pXVOH806cWg5nJACg3MBQ
kAT8mL+RQMCIfZlI9XhtKpE=
=tSsR
-----END PGP SIGNATURE-----


------------=_1174078068-8862-1639
Content-Type: text/plain; name="message-footer.txt"
Content-Disposition: inline; filename="message-footer.txt"
Content-Transfer-Encoding: 8bit

To unsubscribe, send a email to sympa@mandrivalinux.org
with this subject : unsubscribe security-announce
_______________________________________________________
Want to buy your Pack or Services from Mandriva?
Go to http://www.mandrivastore.com
Join the Club : http://www.mandrivaclub.com
_______________________________________________________

------------=_1174078068-8862-1639--
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung