Solution
Please Install the Updated Packages.
Insight
Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in OpenOffice.org (OOo) 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow. (CVE-2008-2152)
Also, according to bug #38874 decimal numbers on Hebrew documents would appear as Arabic characters. Another issue (#39799) is with measurements units configuration to format paragraphs on the menu:
(Tools ->
Options ->
OpenOffice.org Writer ->
General). Even setting
to centimeters on (Indent &
Spacing) option it shows as characters
(ch) on (Indents &
Spacing) configuration on the menu: (Format ->
Paragraph ->
Indents &
Spacing). Moreover, a document holding Notes
edited on Microsoft Office would not show when opened with OpenOffice.
These and a number of other OpenOffice.org issues were fixed by the new version provided in this update.
Affected
openoffice.org on Mandriva Linux 2008.1,
Mandriva Linux 2008.1/X86_64
Severity
Classification
-
CVE CVE-2008-2152 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities