Detections
Analytics
OpenOffice < 2.0.3 Multiple Vulnerabilities
high Nessus Plugin ID 21784
Synopsis
Arbitrary code can be executed on the remote host through OpenOffice.org.Description
The remote host is running a version of OpenOffice.org which is older than version 2.0.3.An attacker may use this to execute arbitrary code on this host.
To succeed, the attacker would have to send a rogue file to a user of the remote computer and have him open it. The file could be crafted in such a way that it could exploit a buffer overflow in OpenOffice.org's XML parser, or by containing rogue macros.
Solution
Upgrade to OpenOffice.org 2.0.3 or newer.See Also
http://www.openoffice.org/security/cves/CVE-2006-2199.html
Plugin Details
Severity: High
ID: 21784
File Name: openoffice_org_203.nasl
Version: 1.18
Type: local
Agent: windows
Family: Windows
Published: 6/30/2006
Updated: 7/16/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.6
Temporal Score: 5.6
Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:sun:openoffice.org
Required KB Items: SMB/OpenOffice/Build
Exploit Ease: No known exploits are available
Patch Publication Date: 7/30/2006
Vulnerability Publication Date: 6/30/2006