9.3 - SUN-242627

Executive Summary

Summary
Title	Sun Alert 242627 Security Vulnerability in StarOffice Related to .wmf Files May Lead to Heap Overflows and Arbitrary Code Execution

Informations
Name	SUN-242627	First vendor Publication	2008-11-13
Vendor	Sun	Last vendor Modification	2009-07-17
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Product: StarOffice 7 Software StarSuite 7 Software StarOffice 8 Software StarSuite 8 Software

A security vulnerability with the way StarOffice/StarSuite 7 and 8 process Windows Metafile (.wmf) files may allow a remote unprivileged user who provides a StarOffice/StarSuite document that is opened by a local user to execute arbitrary commands on the system with the privileges of the user running StarOffice/StarSuite.

This issue is described in the following document:

CVE-2008-2237 at: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2008-2237

Sun acknowledges with thanks, an anonymous researcher working with the SureRun security team (http://www.SureRun.cn).

State: Resolved

First released: 13-Nov-2008

Sun Alert Link:http://sunsolve.sun.com/search/document.do?assetkey=1-66-242627-1

Original Source

Url : http://blogs.sun.com/security/entry/sun_alert_242627_security_vulnerability

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10784

Oval ID:	oval:org.mitre.oval:def:10784
Title:	Heap-based buffer overflow in OpenOffice.org (OOo) 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted WMF file associated with a StarOffice/StarSuite document.
Description:	Heap-based buffer overflow in OpenOffice.org (OOo) 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted WMF file associated with a StarOffice/StarSuite document.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-2237	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section openoffice.org-libs is earlier than 0:1.1.2-43.2.0.EL3 AND openoffice.org is earlier than 0:1.1.2-43.2.0.EL3 AND openoffice.org-i18n is earlier than 0:1.1.2-43.2.0.EL3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org is earlier than 0:1.1.5-10.6.0.7.EL4 AND openoffice.org-libs is earlier than 0:1.1.5-10.6.0.7.EL4 AND openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2 is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.7.EL4 AND openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org-kde is earlier than 0:1.1.5-10.6.0.7.EL4 AND openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.0 AND openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.0 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section openoffice.org-langpack-sk_SK is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-zu_ZA is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-pa_IN is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-hi_IN is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-et_EE is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-kn_IN is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-zh_TW is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-writer is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-ve_ZA is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-ga_IE is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-ta_IN is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-ko_KR is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-or_IN is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-da_DK is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-sr_CS is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-pl_PL is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-fr is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-ts_ZA is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-javafilter is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-as_IN is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-testtools is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-hr_HR is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-de is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-emailmerge is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-xsltfilter is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-tn_ZA is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-te_IN is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-sv is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-base is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-ca_ES is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-nr_ZA is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-core is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-nl is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-ur is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-nn_NO is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-ar is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-ja_JP is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-gu_IN is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-tr_TR is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-eu_ES is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-fi_FI is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-graphicfilter is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-pyuno is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-ml_IN is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-gl_ES is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-sdk-doc is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-zh_CN is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-xh_ZA is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-it is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-sdk is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-es is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-nb_NO is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-sl_SI is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-draw is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-nso_ZA is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-ms_MY is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-el_GR is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-hu_HU is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-ss_ZA is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-bn is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-he_IL is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-pt_PT is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-lt_LT is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-af_ZA is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-bg_BG is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-calc is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-cs_CZ is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-cy_GB is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-mr_IN is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-headless is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-th_TH is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-pt_BR is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-ru is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-math is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-impress is earlier than 1:2.3.0-6.5.4.el5_2 AND openoffice.org-langpack-st_ZA is earlier than 1:2.3.0-6.5.4.el5_2

CPE : Common Platform Enumeration

Type	Description	Count
Application	Openoffice Openoffice.Org cpe:2.3:a:openoffice:openoffice.org:2.4.1:::::::* cpe:2.3:a:openoffice:openoffice.org:2.4.1::64-bit::::: cpe:2.3:a:openoffice:openoffice.org:2.4:::::::* cpe:2.3:a:openoffice:openoffice.org:2.3.1:::::::* cpe:2.3:a:openoffice:openoffice.org:2.3:::::::* cpe:2.3:a:openoffice:openoffice.org:2.2.1:::::::* cpe:2.3:a:openoffice:openoffice.org:2.2:::::::* cpe:2.3:a:openoffice:openoffice.org:2.1.154:::::::* cpe:2.3:a:openoffice:openoffice.org:2.1.152:::::::* cpe:2.3:a:openoffice:openoffice.org:2.1:::::::* cpe:2.3:a:openoffice:openoffice.org:2.0.4:::::::* cpe:2.3:a:openoffice:openoffice.org:2.0.3:::::::* cpe:2.3:a:openoffice:openoffice.org:2.0.2:::::::* cpe:2.3:a:openoffice:openoffice.org:2.0.2:rc1:::::: cpe:2.3:a:openoffice:openoffice.org:2.0.2:rc2:::::: cpe:2.3:a:openoffice:openoffice.org:2.0.1:::::::* cpe:2.3:a:openoffice:openoffice.org:2.0:::::::* cpe:2.3:a:openoffice:openoffice.org:2.0:beta2:::::: cpe:2.3:a:openoffice:openoffice.org:1.9.95:::::::* cpe:2.3:a:openoffice:openoffice.org:1.9.93:::::::* cpe:2.3:a:openoffice:openoffice.org:1.9.91:::::::* cpe:2.3:a:openoffice:openoffice.org:1.9.87:::::::* cpe:2.3:a:openoffice:openoffice.org:1.9.84:::::::* cpe:2.3:a:openoffice:openoffice.org:1.9.680:::::::* cpe:2.3:a:openoffice:openoffice.org:1.9.156:::::::* cpe:2.3:a:openoffice:openoffice.org:1.9.130:::::::* cpe:2.3:a:openoffice:openoffice.org:1.9.122:::::::* cpe:2.3:a:openoffice:openoffice.org:1.9.118:::::::* cpe:2.3:a:openoffice:openoffice.org:1.9.113:::::::* cpe:2.3:a:openoffice:openoffice.org:1.9.104:::::::* cpe:2.3:a:openoffice:openoffice.org:1.9.100:::::::* cpe:2.3:a:openoffice:openoffice.org:1.1.5:::::::* cpe:2.3:a:openoffice:openoffice.org:1.1.4:::::::* cpe:2.3:a:openoffice:openoffice.org:1.1.3:::::::* cpe:2.3:a:openoffice:openoffice.org:1.1.2:::::::* cpe:2.3:a:openoffice:openoffice.org:1.1.1:::::::* cpe:2.3:a:openoffice:openoffice.org:1.1:rc1:::::: cpe:2.3:a:openoffice:openoffice.org:1.1:beta:::::: cpe:2.3:a:openoffice:openoffice.org:1.1:::::::* cpe:2.3:a:openoffice:openoffice.org:1.1:rc3:::::: cpe:2.3:a:openoffice:openoffice.org:1.1:beta2:::::: cpe:2.3:a:openoffice:openoffice.org:1.0.3.1:::::::* cpe:2.3:a:openoffice:openoffice.org:1.0.2:::::::* cpe:2.3:a:openoffice:openoffice.org:1.0.1:::::::* cpe:2.3:a:openoffice:openoffice.org:1.0.0:::::::* cpe:2.3:a:openoffice:openoffice.org:1.0-ru:::::::* cpe:2.3:a:openoffice:openoffice.org::::::::	47

OpenVAS Exploits

Date	Description
2009-06-05	Name : Ubuntu USN-698-1 (nagios) File : nvt/ubuntu_698_1.nasl
2009-06-05	Name : Ubuntu USN-707-1 (cupsys) File : nvt/ubuntu_707_1.nasl
2009-03-23	Name : Ubuntu Update for openoffice.org, openoffice.org-amd64 vulnerabilities USN-6... File : nvt/gb_ubuntu_USN_677_1.nasl
2009-03-06	Name : RedHat Update for openoffice.org RHSA-2008:0939-00 File : nvt/gb_RHSA-2008_0939-00_openoffice.org.nasl
2009-02-27	Name : CentOS Update for openoffice.org CESA-2008:0939 centos3 i386 File : nvt/gb_CESA-2008_0939_openoffice.org_centos3_i386.nasl
2009-02-27	Name : CentOS Update for openoffice.org CESA-2008:0939 centos3 x86_64 File : nvt/gb_CESA-2008_0939_openoffice.org_centos3_x86_64.nasl
2009-02-17	Name : Fedora Update for openoffice.org FEDORA-2008-9313 File : nvt/gb_fedora_2008_9313_openoffice.org_fc9.nasl
2009-02-17	Name : Fedora Update for openoffice.org FEDORA-2008-9333 File : nvt/gb_fedora_2008_9333_openoffice.org_fc8.nasl
2009-01-20	Name : Mandrake Security Advisory MDVSA-2009:006 (openoffice.org) File : nvt/mdksa_2009_006.nasl
2008-12-29	Name : Ubuntu USN-677-2 (OpenOffice) File : nvt/ubuntu_677_2.nasl
2008-12-29	Name : Ubuntu USN-697-1 (imlib2) File : nvt/ubuntu_697_1.nasl
2008-12-29	Name : Ubuntu USN-698-2 (nagios3) File : nvt/ubuntu_698_2.nasl
2008-12-29	Name : Ubuntu USN-699-1 (blender) File : nvt/ubuntu_699_1.nasl
2008-12-23	Name : Gentoo Security Advisory GLSA 200812-13 (openoffice openoffice-bin) File : nvt/glsa_200812_13.nasl
2008-12-03	Name : FreeBSD Ports: openoffice.org-2, openoffice.org-2-RC, openoffice.org-2-devel File : nvt/freebsd_openoffice.org-2.nasl
2008-11-01	Name : Debian Security Advisory DSA 1661-1 (openoffice.org) File : nvt/deb_1661_1.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
49411	OpenOffice.org (OOo) Crafted StarOffice / StarSuite EMF File Handling Overflow

Nessus® Vulnerability Scanner

Date	Description
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2008-0939.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20081105_openoffice_org_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20081105_openoffice_org2_on_SL45__46__47.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_0_OpenOffice_org-081030.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-677-2.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2008-0939.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-677-1.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-006.nasl - Type : ACT_GATHER_INFO
2008-12-15	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200812-13.nasl - Type : ACT_GATHER_INFO
2008-12-01	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_842bafddbe2f11dda5780030843d3802.nasl - Type : ACT_GATHER_INFO
2008-11-21	Name : The remote openSUSE host is missing a security update. File : suse_OpenOffice_org-5738.nasl - Type : ACT_GATHER_INFO
2008-11-21	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_OpenOffice_org-5740.nasl - Type : ACT_GATHER_INFO
2008-11-05	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0939.nasl - Type : ACT_GATHER_INFO
2008-11-03	Name : The remote Fedora host is missing a security update. File : fedora_2008-9333.nasl - Type : ACT_GATHER_INFO
2008-11-03	Name : The remote Fedora host is missing a security update. File : fedora_2008-9313.nasl - Type : ACT_GATHER_INFO
2008-10-31	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1661.nasl - Type : ACT_GATHER_INFO
2008-10-29	Name : The remote Windows host has a program affected by multiple buffer overflows. File : openoffice_242.nasl - Type : ACT_GATHER_INFO

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	1
CPE ID(s)	47
osvdb(s)	1
Openvas Exploit(s)	16
Nessus® Exploit(s)	17

	Related
9.3	CVE-2008-2237
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 1 more Alert(s)

9.3 - SUN-242627

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Nessus® Vulnerability Scanner

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU