Detections
Analytics
openSUSE Security Update : OpenOffice_org (OpenOffice_org-1979)
high Nessus Plugin ID 45071
Language:
Synopsis
The remote openSUSE host is missing a security update.Description
This update of OpenOffice_org includes fixes for the following vulnerabilities :- CVE-2009-0217: XML signature weakness
- CVE-2009-2949: XPM Import Integer Overflow
- CVE-2009-2950: GIF Import Heap Overflow
- CVE-2009-3301: MS Word sprmTDefTable Memory Corruption
- CVE-2009-3302: MS Word sprmTDefTable Memory Corruption
- CVE-2010-0136: In the ooo-build variant of OpenOffice_org VBA Macro support does not honor Macro security settings.
Solution
Update the affected OpenOffice_org packages.See Also
https://bugzilla.novell.com/show_bug.cgi?id=521564
https://bugzilla.novell.com/show_bug.cgi?id=564497
Plugin Details
Severity: High
ID: 45071
File Name: suse_11_0_OpenOffice_org-100211.nasl
Version: 1.12
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 3/17/2010
Updated: 1/14/2021
Supported Sensors: Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: High
Base Score: 9.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:novell:opensuse:openoffice_org-devel, p-cpe:/a:novell:opensuse:openoffice_org-calc, p-cpe:/a:novell:opensuse:openoffice_org-officebean, p-cpe:/a:novell:opensuse:openoffice_org, p-cpe:/a:novell:opensuse:openoffice_org-gnome, p-cpe:/a:novell:opensuse:openoffice_org-writer, p-cpe:/a:novell:opensuse:openoffice_org-impress, p-cpe:/a:novell:opensuse:openoffice_org-icon-themes-prebuilt, p-cpe:/a:novell:opensuse:openoffice_org-branding-upstream, p-cpe:/a:novell:opensuse:openoffice_org-pyuno, p-cpe:/a:novell:opensuse:openoffice_org-testtool, cpe:/o:novell:opensuse:11.0, p-cpe:/a:novell:opensuse:openoffice_org-mailmerge, p-cpe:/a:novell:opensuse:openoffice_org-filters, p-cpe:/a:novell:opensuse:openoffice_org-mono, p-cpe:/a:novell:opensuse:openoffice_org-kde, p-cpe:/a:novell:opensuse:openoffice_org-sdk, p-cpe:/a:novell:opensuse:openoffice_org-base, p-cpe:/a:novell:opensuse:openoffice_org-draw, p-cpe:/a:novell:opensuse:openoffice_org-math
Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 2/11/2010
Exploitable With
Core Impact
Reference Information
CVE: CVE-2009-0217, CVE-2009-2949, CVE-2009-2950, CVE-2009-3301, CVE-2009-3302, CVE-2010-0136