The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0182 advisory.

  - OpenOffice.org: directory traversal flaws in handling of XSLT jar filter descriptions and OXT extension     files (CVE-2010-3450)

  - OpenOffice.org: Array index error by insecure parsing of broken rtf tables (CVE-2010-3451)

  - OpenOffice.org: Integer signedness error (crash) by processing certain RTF tags (CVE-2010-3452)

  - OpenOffice.org: Heap-based buffer overflow by processing *.doc files with WW8 list styles with specially-     crafted count of list levels (CVE-2010-3453)

  - OpenOffice.org: Array index error by scanning document typography information of certain *.doc files     (CVE-2010-3454)

  - OpenOffice.org: soffice insecure LD_LIBRARY_PATH setting (CVE-2010-3689)

  - OpenOffice.org:  heap based buffer overflow in PPT import (CVE-2010-4253)

  - OpenOffice.org: heap based buffer overflow when parsing TGA files (CVE-2010-4643)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 5 : openoffice.org (RHSA-2011:0182)

high Nessus Plugin ID 51826

Version 1.22