9.3 - USN-406-1

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	OpenOffice.org vulnerability

Informations
Name	USN-406-1	First vendor Publication	2007-01-12
Vendor	Ubuntu	Last vendor Modification	2007-01-12
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

A security issue affects the following Ubuntu releases:

Ubuntu 5.10 Ubuntu 6.06 LTS

This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the following package versions:

Ubuntu 5.10:
openoffice.org2-core 1.9.129-0.1ubuntu4.2

Ubuntu 6.06 LTS:
openoffice.org-core 2.0.2-2ubuntu12.2

In general, a standard system upgrade is sufficient to effect the necessary changes.

Details follow:

An integer overflow was discovered in OpenOffice.org's handling of WMF files. If a user were tricked into opening a specially crafted WMF file, an attacker could execute arbitrary code with user privileges.

Original Source

Url : http://www.ubuntu.com/usn/USN-406-1

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-189	Numeric Errors (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:8280

Oval ID:	oval:org.mitre.oval:def:8280
Title:	OpenOffice_org WMF buffer overflows
Description:	Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to execute arbitrary code via a crafted (a) WMF or (b) EMF file that triggers heap-based buffer overflows in (1) wmf/winwmf.cxx, during processing of META_ESCAPE records; and wmf/enhwmf.cxx, during processing of (2) EMR_POLYPOLYGON and (3) EMR_POLYPOLYGON16 records.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2006-5870	Version:	5
Platform(s):	Novell Linux Desktop 9 SUSE Linux 10.1 SUSE Linux 10.0 SUSE Linux Professional 9.3 SUSE Linux Desktop 1.0 SUSE Linux Enterprise Desktop 10	Product(s):	OpenOffice_org1 OpenOffice_org1-ar OpenOffice_org1-ca OpenOffice_org1-cs OpenOffice_org1-da OpenOffice_org1-de OpenOffice_org1-el OpenOffice_org1-en OpenOffice_org1-es OpenOffice_org1-et OpenOffice_org1-fi OpenOffice_org1-fr OpenOffice_org1-gnome OpenOffice_org1-hu OpenOffice_org1-it OpenOffice_org1-ja OpenOffice_org1-kde OpenOffice_org1-ko OpenOffice_org1-nl OpenOffice_org1-pl OpenOffice_org1-pt OpenOffice_org1-ru OpenOffice_org1-sk OpenOffice_org1-sl OpenOffice_org1-sv OpenOffice_org1-tr OpenOffice_org1-zh-CN OpenOffice_org1-zh-TW OpenOffice_org OpenOffice_org-af OpenOffice_org-be-BY OpenOffice_org-bg OpenOffice_org-ca OpenOffice_org-cs OpenOffice_org-cy OpenOffice_org-da OpenOffice_org-de OpenOffice_org-el OpenOffice_org-en OpenOffice_org-en-GB OpenOffice_org-es OpenOffice_org-et OpenOffice_org-fi OpenOffice_org-fr OpenOffice_org-galleries OpenOffice_org-gnome OpenOffice_org-gu-IN OpenOffice_org-hr OpenOffice_org-hu OpenOffice_org-hunspell OpenOffice_org-it OpenOffice_org-ja OpenOffice_org-kde OpenOffice_org-ko OpenOffice_org-mono OpenOffice_org-nb OpenOffice_org-nl OpenOffice_org-nn OpenOffice_org-officebean OpenOffice_org-pa-IN OpenOffice_org-pl OpenOffice_org-pt OpenOffice_org-pt-BR OpenOffice_org-ru OpenOffice_org-sk OpenOffice_org-sl OpenOffice_org-sv OpenOffice_org-tr OpenOffice_org-vi OpenOffice_org-xh OpenOffice_org-zh-CN OpenOffice_org-zh-TW OpenOffice_org-zu
Definition Synopsis:
Exploitable Novell Linux Desktop 9 or SUSE Linux Desktop 1.0 Vulnerability Exists Potential System Vulnerability Exists Potential Novell Linux Desktop 9 or SUSE Linux Desktop 1.0 Vulnerability Exists Novell Linux Desktop 9 is installed AND SUSE Linux Desktop 1.0 is installed AND ix86 architecture AND Potential Package Vulnerability Exists OpenOffice_org is installed AND OpenOffice_org-ar is installed AND OpenOffice_org-ca is installed AND OpenOffice_org-cs is installed AND OpenOffice_org-da is installed AND OpenOffice_org-de is installed AND OpenOffice_org-el is installed AND OpenOffice_org-en is installed AND OpenOffice_org-es is installed AND OpenOffice_org-et is installed AND OpenOffice_org-fi is installed AND OpenOffice_org-fr is installed AND OpenOffice_org-gnome is installed AND OpenOffice_org-hu is installed AND OpenOffice_org-it is installed AND OpenOffice_org-ja is installed AND OpenOffice_org-kde is installed AND OpenOffice_org-ko is installed AND OpenOffice_org-nl is installed AND OpenOffice_org-pl is installed AND OpenOffice_org-pt is installed AND OpenOffice_org-pt-BR is installed AND OpenOffice_org-ru is installed AND OpenOffice_org-sk is installed AND OpenOffice_org-sl is installed AND OpenOffice_org-sv is installed AND OpenOffice_org-tr is installed AND OpenOffice_org-zh-CN is installed AND OpenOffice_org-zh-TW is installed OR Exploitable SUSE Linux 10.1 Vulnerability Exists Potential System Vulnerability Exists SUSE Linux 10.1 is installed AND Potential Architecture Vulnerability Exists ix86 architecture AND ppc architecture AND Potential Package Vulnerability Exists Potential Package OpenOffice_org Vulnerability Exists Package OpenOffice_org is installed AND Package OpenOffice_org version-release is less than 2.0.2-27.15 OR Potential Package OpenOffice_org-gnome Vulnerability Exists Package OpenOffice_org-gnome is installed AND Package OpenOffice_org-gnome version-release is less than 2.0.2-27.15 OR Potential Package OpenOffice_org-kde Vulnerability Exists Package OpenOffice_org-kde is installed AND Package OpenOffice_org-kde version-release is less than 2.0.2-27.15 OR Potential Package OpenOffice_org-mono Vulnerability Exists Package OpenOffice_org-mono is installed AND Package OpenOffice_org-mono version-release is less than 2.0.2-27.15 OR Potential Package OpenOffice_org-officebean Vulnerability Exists Package OpenOffice_org-officebean is installed AND Package OpenOffice_org-officebean version-release is less than 2.0.2-27.15 OR Exploitable SUSE Linux 10.0 Vulnerability Exists Potential System Vulnerability Exists SUSE Linux 10.0 is installed AND Potential Architecture Vulnerability Exists ix86 architecture AND ppc architecture AND Potential Package Vulnerability Exists Potential Package OpenOffice_org Vulnerability Exists Package OpenOffice_org is installed AND Package OpenOffice_org version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-af Vulnerability Exists Package OpenOffice_org-af is installed AND Package OpenOffice_org-af version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-ar Vulnerability Exists Package OpenOffice_org-ar is installed AND Package OpenOffice_org-ar version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-be-BY Vulnerability Exists Package OpenOffice_org-be-BY is installed AND Package OpenOffice_org-be-BY version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-bg Vulnerability Exists Package OpenOffice_org-bg is installed AND Package OpenOffice_org-bg version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-ca Vulnerability Exists Package OpenOffice_org-ca is installed AND Package OpenOffice_org-ca version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-cs Vulnerability Exists Package OpenOffice_org-cs is installed AND Package OpenOffice_org-cs version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-cy Vulnerability Exists Package OpenOffice_org-cy is installed AND Package OpenOffice_org-cy version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-da Vulnerability Exists Package OpenOffice_org-da is installed AND Package OpenOffice_org-da version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-de Vulnerability Exists Package OpenOffice_org-de is installed AND Package OpenOffice_org-de version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-el Vulnerability Exists Package OpenOffice_org-el is installed AND Package OpenOffice_org-el version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-en-GB Vulnerability Exists Package OpenOffice_org-en-GB is installed AND Package OpenOffice_org-en-GB version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-es Vulnerability Exists Package OpenOffice_org-es is installed AND Package OpenOffice_org-es version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-et Vulnerability Exists Package OpenOffice_org-et is installed AND Package OpenOffice_org-et version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-fi Vulnerability Exists Package OpenOffice_org-fi is installed AND Package OpenOffice_org-fi version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-fr Vulnerability Exists Package OpenOffice_org-fr is installed AND Package OpenOffice_org-fr version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-galleries Vulnerability Exists Package OpenOffice_org-galleries is installed AND Package OpenOffice_org-galleries version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-gnome Vulnerability Exists Package OpenOffice_org-gnome is installed AND Package OpenOffice_org-gnome version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-gu-IN Vulnerability Exists Package OpenOffice_org-gu-IN is installed AND Package OpenOffice_org-gu-IN version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-hr Vulnerability Exists Package OpenOffice_org-hr is installed AND Package OpenOffice_org-hr version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-hu Vulnerability Exists Package OpenOffice_org-hu is installed AND Package OpenOffice_org-hu version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-hunspell Vulnerability Exists Package OpenOffice_org-hunspell is installed AND Package OpenOffice_org-hunspell version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-it Vulnerability Exists Package OpenOffice_org-it is installed AND Package OpenOffice_org-it version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-ja Vulnerability Exists Package OpenOffice_org-ja is installed AND Package OpenOffice_org-ja version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-kde Vulnerability Exists Package OpenOffice_org-kde is installed AND Package OpenOffice_org-kde version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-ko Vulnerability Exists Package OpenOffice_org-ko is installed AND Package OpenOffice_org-ko version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-mono Vulnerability Exists Package OpenOffice_org-mono is installed AND Package OpenOffice_org-mono version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-nb Vulnerability Exists Package OpenOffice_org-nb is installed AND Package OpenOffice_org-nb version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-nl Vulnerability Exists Package OpenOffice_org-nl is installed AND Package OpenOffice_org-nl version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-nn Vulnerability Exists Package OpenOffice_org-nn is installed AND Package OpenOffice_org-nn version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-officebean Vulnerability Exists Package OpenOffice_org-officebean is installed AND Package OpenOffice_org-officebean version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-pa-IN Vulnerability Exists Package OpenOffice_org-pa-IN is installed AND Package OpenOffice_org-pa-IN version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-pl Vulnerability Exists Package OpenOffice_org-pl is installed AND Package OpenOffice_org-pl version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-pt Vulnerability Exists Package OpenOffice_org-pt is installed AND Package OpenOffice_org-pt version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-pt-BR Vulnerability Exists Package OpenOffice_org-pt-BR is installed AND Package OpenOffice_org-pt-BR version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-ru Vulnerability Exists Package OpenOffice_org-ru is installed AND Package OpenOffice_org-ru version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-sk Vulnerability Exists Package OpenOffice_org-sk is installed AND Package OpenOffice_org-sk version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-sl Vulnerability Exists Package OpenOffice_org-sl is installed AND Package OpenOffice_org-sl version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-sv Vulnerability Exists Package OpenOffice_org-sv is installed AND Package OpenOffice_org-sv version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-tr Vulnerability Exists Package OpenOffice_org-tr is installed AND Package OpenOffice_org-tr version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-vi Vulnerability Exists Package OpenOffice_org-vi is installed AND Package OpenOffice_org-vi version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-xh Vulnerability Exists Package OpenOffice_org-xh is installed AND Package OpenOffice_org-xh version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-zh-CN Vulnerability Exists Package OpenOffice_org-zh-CN is installed AND Package OpenOffice_org-zh-CN version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-zh-TW Vulnerability Exists Package OpenOffice_org-zh-TW is installed AND Package OpenOffice_org-zh-TW version-release is less than 2.0.0-1.6 OR Potential Package OpenOffice_org-zu Vulnerability Exists Package OpenOffice_org-zu is installed AND Package OpenOffice_org-zu version-release is less than 2.0.0-1.6 OR Exploitable SUSE Linux Professional 9.3 Vulnerability Exists Potential System Vulnerability Exists SUSE Linux Professional 9.3 is installed AND ix86 architecture AND Potential Package Vulnerability Exists Potential Package OpenOffice_org1 Vulnerability Exists Package OpenOffice_org1 is installed AND Package OpenOffice_org1 version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-ar Vulnerability Exists Package OpenOffice_org1-ar is installed AND Package OpenOffice_org1-ar version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-ca Vulnerability Exists Package OpenOffice_org1-ca is installed AND Package OpenOffice_org1-ca version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-cs Vulnerability Exists Package OpenOffice_org1-cs is installed AND Package OpenOffice_org1-cs version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-da Vulnerability Exists Package OpenOffice_org1-da is installed AND Package OpenOffice_org1-da version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-de Vulnerability Exists Package OpenOffice_org1-de is installed AND Package OpenOffice_org1-de version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-el Vulnerability Exists Package OpenOffice_org1-el is installed AND Package OpenOffice_org1-el version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-en Vulnerability Exists Package OpenOffice_org1-en is installed AND Package OpenOffice_org1-en version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-es Vulnerability Exists Package OpenOffice_org1-es is installed AND Package OpenOffice_org1-es version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-et Vulnerability Exists Package OpenOffice_org1-et is installed AND Package OpenOffice_org1-et version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-fi Vulnerability Exists Package OpenOffice_org1-fi is installed AND Package OpenOffice_org1-fi version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-fr Vulnerability Exists Package OpenOffice_org1-fr is installed AND Package OpenOffice_org1-fr version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-gnome Vulnerability Exists Package OpenOffice_org1-gnome is installed AND Package OpenOffice_org1-gnome version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-hu Vulnerability Exists Package OpenOffice_org1-hu is installed AND Package OpenOffice_org1-hu version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-it Vulnerability Exists Package OpenOffice_org1-it is installed AND Package OpenOffice_org1-it version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-ja Vulnerability Exists Package OpenOffice_org1-ja is installed AND Package OpenOffice_org1-ja version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-kde Vulnerability Exists Package OpenOffice_org1-kde is installed AND Package OpenOffice_org1-kde version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-ko Vulnerability Exists Package OpenOffice_org1-ko is installed AND Package OpenOffice_org1-ko version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-nl Vulnerability Exists Package OpenOffice_org1-nl is installed AND Package OpenOffice_org1-nl version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-pl Vulnerability Exists Package OpenOffice_org1-pl is installed AND Package OpenOffice_org1-pl version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-pt Vulnerability Exists Package OpenOffice_org1-pt is installed AND Package OpenOffice_org1-pt version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-ru Vulnerability Exists Package OpenOffice_org1-ru is installed AND Package OpenOffice_org1-ru version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-sk Vulnerability Exists Package OpenOffice_org1-sk is installed AND Package OpenOffice_org1-sk version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-sl Vulnerability Exists Package OpenOffice_org1-sl is installed AND Package OpenOffice_org1-sl version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-sv Vulnerability Exists Package OpenOffice_org1-sv is installed AND Package OpenOffice_org1-sv version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-tr Vulnerability Exists Package OpenOffice_org1-tr is installed AND Package OpenOffice_org1-tr version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-zh-CN Vulnerability Exists Package OpenOffice_org1-zh-CN is installed AND Package OpenOffice_org1-zh-CN version-release is less than 1.1.3-4.7 OR Potential Package OpenOffice_org1-zh-TW Vulnerability Exists Package OpenOffice_org1-zh-TW is installed AND Package OpenOffice_org1-zh-TW version-release is less than 1.1.3-4.7 OR Exploitable SUSE Linux Enterprise Desktop 10 Vulnerability Exists Potential System Vulnerability Exists SUSE Linux Enterprise Desktop 10 is installed AND Potential Architecture Vulnerability Exists ix86 architecture AND ix86 architecture AND Potential Package Vulnerability Exists OpenOffice_org is installed AND OpenOffice_org-gnome is installed AND OpenOffice_org-kde is installed AND OpenOffice_org-mono is installed

Definition Id: oval:org.mitre.oval:def:9145

Oval ID:	oval:org.mitre.oval:def:9145
Title:	Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to execute arbitrary code via a crafted (a) WMF or (b) EMF file that triggers heap-based buffer overflows in (1) wmf/winwmf.cxx, during processing of META_ESCAPE records; and wmf/enhwmf.cxx, during processing of (2) EMR_POLYPOLYGON and (3) EMR_POLYPOLYGON16 records.
Description:	Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to execute arbitrary code via a crafted (a) WMF or (b) EMF file that triggers heap-based buffer overflows in (1) wmf/winwmf.cxx, during processing of META_ESCAPE records; and wmf/enhwmf.cxx, during processing of (2) EMR_POLYPOLYGON and (3) EMR_POLYPOLYGON16 records.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2006-5870	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section openoffice.org-libs is earlier than 0:1.1.2-35.2.0.EL3 AND openoffice.org is earlier than 0:1.1.2-35.2.0.EL3 AND openoffice.org-i18n is earlier than 0:1.1.2-35.2.0.EL3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section openoffice.org-libs is earlier than 0:1.1.5-6.6.0.EL4 AND openoffice.org is earlier than 0:1.1.5-6.6.0.EL4 AND openoffice.org-kde is earlier than 0:1.1.5-6.6.0.EL4 AND openoffice.org-i18n is earlier than 0:1.1.5-6.6.0.EL4

CPE : Common Platform Enumeration

Type	Description	Count
Application	Openoffice cpe:2.3:a:openoffice:openoffice:2.0beta:::::::* cpe:2.3:a:openoffice:openoffice:2.0.4:::::::* cpe:2.3:a:openoffice:openoffice:2.0.3_rc6:::::::* cpe:2.3:a:openoffice:openoffice:2.0.3_rc5:::::::* cpe:2.3:a:openoffice:openoffice:2.0.3_rc4:::::::* cpe:2.3:a:openoffice:openoffice:2.0.3_rc3:::::::* cpe:2.3:a:openoffice:openoffice:2.0.3_1:::::::* cpe:2.3:a:openoffice:openoffice:2.0.3:::::::* cpe:2.3:a:openoffice:openoffice:2.0.2_rc4:::::::* cpe:2.3:a:openoffice:openoffice:2.0.2_rc3:::::::* cpe:2.3:a:openoffice:openoffice:2.0.2_rc2:::::::* cpe:2.3:a:openoffice:openoffice:2.0.2_rc1:::::::* cpe:2.3:a:openoffice:openoffice:2.0.2:::::::* cpe:2.3:a:openoffice:openoffice:2.0.1:::::::* cpe:2.3:a:openoffice:openoffice:2.0.0_rc3:::::::* cpe:2.3:a:openoffice:openoffice:2.0.0_rc2:::::::* cpe:2.3:a:openoffice:openoffice:2.0.0_rc1:::::::* cpe:2.3:a:openoffice:openoffice:2.0.0:::::::* cpe:2.3:a:openoffice:openoffice:2.0:::::::* cpe:2.3:a:openoffice:openoffice:1.1.5:::::::* cpe:2.3:a:openoffice:openoffice:1.1.4:::::::* cpe:2.3:a:openoffice:openoffice:1.1.3:::::::* cpe:2.3:a:openoffice:openoffice:1.1.2:::::::* cpe:2.3:a:openoffice:openoffice:1.1.1b:::::::* cpe:2.3:a:openoffice:openoffice:1.1.1a:::::::* cpe:2.3:a:openoffice:openoffice:1.1.1:::::::* cpe:2.3:a:openoffice:openoffice:1.1.0:::::::* cpe:2.3:a:openoffice:openoffice:1.1:::::::* cpe:2.3:a:openoffice:openoffice:1.0.2:::::::* cpe:2.3:a:openoffice:openoffice:1.0.1:::::::* cpe:2.3:a:openoffice:openoffice::::::::	31
Application	Sun Staroffice cpe:2.3:a:sun:staroffice:8.0:::::::* cpe:2.3:a:sun:staroffice:7.0:::::::* cpe:2.3:a:sun:staroffice:6.0:::::::*	3

OpenVAS Exploits

Date	Description
2009-04-09	Name : Mandriva Update for openoffice.org MDKSA-2007:006 (openoffice.org) File : nvt/gb_mandriva_MDKSA_2007_006.nasl
2009-03-23	Name : Ubuntu Update for openoffice.org/-amd64, openoffice.org2/-amd64 vulnerabilit... File : nvt/gb_ubuntu_USN_406_1.nasl
2009-01-28	Name : SuSE Update for OpenOffice_org SUSE-SA:2007:001 File : nvt/gb_suse_2007_001.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200701-07 (openoffice) File : nvt/glsa_200701_07.nasl
2008-01-17	Name : Debian Security Advisory DSA 1246-1 (openoffice.org) File : nvt/deb_1246_1.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
32611	OpenOffice.org (OOo) wmf/enhwmf.cxx EMF Multiple Record Handling Overflow
32610	OpenOffice.org (OOo) wmf/winwmf.cxx WMF META_ESCAPE Record Parsing Overflow

Nessus® Vulnerability Scanner

Date	Description
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2007-0001.nasl - Type : ACT_GATHER_INFO
2007-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_OpenOffice_org-2407.nasl - Type : ACT_GATHER_INFO
2007-11-10	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-406-1.nasl - Type : ACT_GATHER_INFO
2007-10-17	Name : The remote openSUSE host is missing a security update. File : suse_OpenOffice_org-2408.nasl - Type : ACT_GATHER_INFO
2007-02-18	Name : The remote Mandrake Linux host is missing one or more security updates. File : mandrake_MDKSA-2007-006.nasl - Type : ACT_GATHER_INFO
2007-02-18	Name : The remote host is missing a vendor-supplied security patch File : suse_SA_2007_001.nasl - Type : ACT_GATHER_INFO
2007-01-17	Name : The remote Fedora Core host is missing one or more security updates. File : fedora_2007-005.nasl - Type : ACT_GATHER_INFO
2007-01-17	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200701-07.nasl - Type : ACT_GATHER_INFO
2007-01-11	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1246.nasl - Type : ACT_GATHER_INFO
2007-01-08	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2007-0001.nasl - Type : ACT_GATHER_INFO
2007-01-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2007-0001.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 12:04:05	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	2
CPE ID(s)	34
osvdb(s)	2
Openvas Exploit(s)	5
Nessus® Exploit(s)	11

	Related
9.3	CVE-2006-5870
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 1 more Alert(s)