Detections
Analytics
Sun OpenOffice.org < 2.2 Multiple Vulnerabilities
high Nessus Plugin ID 25004
Synopsis
The remote Windows host has a program that may be affected by multiple vulnerabilities.Description
The remote host is running a version of Sun Microsystems OpenOffice.org that is prior to version 2.2. It is, therefore, affected by a stack-based buffer overflow vulnerability in its handling of StarCalc documents. If a remote attacker can trick a user into opening a specially crafted StarCalc document, the attacker can execute arbitrary code on the remote host subject to the user's privileges.In addition, versions 2.0 - 2.1 reportedly have a heap-based buffer overflow vulnerability that can be triggered when importing a specially crafted WordPerfect document, resulting in arbitrary code execution.
Solution
Upgrade to Sun Microsystems OpenOffice.org version 2.2 or later.See Also
https://seclists.org/bugtraq/2007/Apr/88
http://www.openoffice.org/security/cves/CVE-2007-2.html
Plugin Details
Severity: High
ID: 25004
File Name: openoffice_220.nasl
Version: 1.22
Type: local
Agent: windows
Family: Windows
Published: 4/6/2007
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:sun:openoffice.org
Required KB Items: SMB/OpenOffice/Build
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 3/16/2007