Mandriva Update for openoffice.org MDVSA-2008:137 (openoffice.org)

Solution
Please Install the Updated Packages.
Insight
Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in OpenOffice.org (OOo) 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow. (CVE-2008-2152) Also, according to bug #38874 decimal numbers on Hebrew documents would appear as Arabic characters. Another issue (#39799) is with measurements units configuration to format paragraphs on the menu: (Tools -&gt Options -&gt OpenOffice.org Writer -&gt General). Even setting to centimeters on (Indent &amp Spacing) option it shows as characters (ch) on (Indents &amp Spacing) configuration on the menu: (Format -&gt Paragraph -&gt Indents &amp Spacing). Moreover, a document holding Notes edited on Microsoft Office would not show when opened with OpenOffice. These and a number of other OpenOffice.org issues were fixed by the new version provided in this update.
Affected
openoffice.org on Mandriva Linux 2008.1, Mandriva Linux 2008.1/X86_64