Upstream information
Description
Multiple integer overflows in OpenOffice.org (OOo) 2.x before 2.4.2 allow remote attackers to execute arbitrary code via crafted EMR records in an EMF file associated with a StarOffice/StarSuite document, which trigger a heap-based buffer overflow.NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Novell/SUSE information
Novell Bugzilla entry: 437304, 437666 SUSE Security Advisories:- SUSE-SR:2008:026, published Mon, 24 Nov 2008 16:00:00 +0000
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| openSUSE 10.2 |
| |
| openSUSE 10.3 |
| |
| SUSE Linux Enterprise Desktop 10 SP1 for AMD64 and Intel EM64T SUSE Linux Enterprise Desktop 10 SP1 for x86 |
| sles9-nld.x86-64 sle10-sp1-sdk.x86-64 sles9-nld.x86 sled10.x86 sle10-sp1-sdk.x86 sled10.x86-64 YOU Patch Nr: 12281 ZYPP Patch Nr: 5740 |
| SLE SDK 10 SP1 for X86-64 SLE SDK 10 SP1 for x86 |
| sles9-nld.x86-64 sle10-sp1-sdk.x86-64 sles9-nld.x86 sled10.x86 sle10-sp1-sdk.x86 sled10.x86-64 YOU Patch Nr: 12281 ZYPP Patch Nr: 5740 |
| Novell Linux Desktop 9 for x86 Novell Linux Desktop 9 for x86_64 |
| sles9-nld.x86-64 sle10-sp1-sdk.x86-64 sles9-nld.x86 sled10.x86 sle10-sp1-sdk.x86 sled10.x86-64 YOU Patch Nr: 12281 ZYPP Patch Nr: 5740 |
