Impact
code execution
Solution
Please Install the Updated Packages.
Insight
Security problems were fixed in the WMF and Enhanced WMF handling in OpenOffice_org These could potentially be used to execute code or crash OpenOffice when a user could be convinced to open specially crafted document (for instance a document sent by E-mail).
This issue is tracked by the Mitre CVE ID CVE-2006-5870.
openSUSE 10.2 is not affected by this problem, it already contains the fixed OpenOffice_org 2.1 version.
Additionally the OpenOffice_org 2.0 version in SLED 10 was fitted with hooks to add OfficeXML support with a later update.
Due to the very large size of this update and mirror lag it might take some hours or days until the updates are available on our mirrors.
Affected
OpenOffice_org on Novell Linux Desktop 9, SUSE LINUX 10.1, SUSE SLED 10
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2006-5870 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities