Login
Newsletter
Werbung

Sicherheit: Pufferüberläufe in OpenOffice.org
Aktuelle Meldungen Distributionen
Name: Pufferüberläufe in OpenOffice.org
ID: USN-1537-1
Distribution: Ubuntu
Plattformen: Ubuntu 10.04 LTS
Datum: Di, 14. August 2012, 07:21
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2665
Applikationen: Apache OpenOffice

Originalnachricht


--===============3847783414214222816==
Content-Type: multipart/signed; micalg="pgp-sha512";
protocol="application/pgp-signature";
boundary="=-N2beY8wG/jwdHOCL/jbz"


--=-N2beY8wG/jwdHOCL/jbz
Content-Type: text/plain; charset="UTF-8
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-1537-1
August 13, 2012

openoffice.org vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 10.04 LTS

Summary:

OpenOffice.org could be made to crash or run programs as your login if it
opened a specially crafted file.

Software Description:
- openoffice.org: Office productivity suite

Details:

It was discovered that OpenOffice.org incorrectly handled certain
encryption tags in Open Document Text (.odt) files. If a user were tricked
into opening a specially crafted file, an attacker could cause
OpenOffice.org to crash or possibly execute arbitrary code with the
privileges of the user invoking the program.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.04 LTS:
openoffice.org-core 1:3.2.0-7ubuntu4.4

After a standard system update you need to restart OpenOffice.org to make
all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-1537-1
CVE-2012-2665

Package Information:
https://launchpad.net/ubuntu/+source/openoffice.org/1:3.2.0-7ubuntu4.4



--×2beY8wG/jwdHOCL/jbz
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iQIcBAABCgAGBQJQKawYAAoJEGVp2FWnRL6THB8QAK5sdNG5T43KnQDfhHSBLAzP
hZ1CvACX+asRWmwszpV7p1RpTXizN0euKidmJiQyKjKQzpxYeMdxi5dCOTFMO/XC
jeB6d4Yxvmpc3fgxoyKT9rYlWxNWyT7dL3SH+Np8lTNGxKrL9Ha6xBy1vJpG585s
5la8LkaTmcLgK4nXYRXG8aipRQuz3z3sgyVlfgcJ16rFnQ5VEMcnopiN0JWCQMPr
zuWYF8vleBoTXTDy6GAciRmEBDVQqLGyivH//WDDUY8PTK8AenFGcVatZGVbVUSd
HQLQjt4sqcrTPUNI9w/IGKACMeFfV4mWd+B2V6AO/BnmePDRyvHVq/lMkO5vO8bw
XR/s2NqPrraQXA1Pvsx9PNm94Tceeg82YryppqRmeKhE1gztZdd5XoKlfpe8PUDt
R0ykBEfpquTkNlKfFztLj6V7Vw1htROaLOzCMxVyuLDrGe4A1mdK+O9g60NlNBCF
7L9dK1/NMg/J4nQy5sDRUQrgMCm7B/+LIEcg+a6qGDFcGtdGAA8PX5fhNqdG8HBI
AkM9WOYOYlnEuSIivaXTBJJeS5J+WTI4+NjomXJrvIHYVNE6+OsIPRrcRoYYik/7
m37pr+SfQ/DqbWGytyqMDjsYBrJeuwAwmMQouvc0iyoRaNsKkRZeXdcf6frrUUpY
I0/7PcnbzFmale9vXV9o
=kQir
-----END PGP SIGNATURE-----

--=-N2beY8wG/jwdHOCL/jbz--



--===============3847783414214222816==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============3847783414214222816==--
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung