Detections
Analytics

RHEL 6 : openoffice.org (RHSA-2011:0183)

high Nessus Plugin ID 51827

Language:

Synopsis

The remote Red Hat host is missing one or more security updates for openoffice.org.

Description

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0183 advisory.

 OpenOffice.org is an office productivity suite that includes desktop applications, such as a word processor, spreadsheet application, presentation manager, formula editor, and a drawing program.

 An array index error and an integer signedness error were found in the way OpenOffice.org parsed certain Rich Text Format (RTF) files. An attacker could use these flaws to create a specially-crafted RTF file that, when opened, would cause OpenOffice.org to crash or, possibly, execute arbitrary code with the privileges of the user running OpenOffice.org.
 (CVE-2010-3451, CVE-2010-3452)

 A heap-based buffer overflow flaw and an array index error were found in the way OpenOffice.org parsed certain Microsoft Office Word documents. An attacker could use these flaws to create a specially-crafted Microsoft Office Word document that, when opened, would cause OpenOffice.org to crash or, possibly, execute arbitrary code with the privileges of the user running OpenOffice.org. (CVE-2010-3453, CVE-2010-3454)

 A heap-based buffer overflow flaw was found in the way OpenOffice.org parsed certain Microsoft Office PowerPoint files. An attacker could use this flaw to create a specially-crafted Microsoft Office PowerPoint file that, when opened, would cause OpenOffice.org to crash or, possibly, execute arbitrary code with the privileges of the user running OpenOffice.org. (CVE-2010-4253)

 A heap-based buffer overflow flaw was found in the way OpenOffice.org parsed certain TARGA (Truevision TGA) files. An attacker could use this flaw to create a specially-crafted TARGA file. If a document containing this specially-crafted TARGA file was opened, or if a user tried to insert the file into an existing document, it would cause OpenOffice.org to crash or, possibly, execute arbitrary code with the privileges of the user running OpenOffice.org. (CVE-2010-4643)

 A directory traversal flaw was found in the way OpenOffice.org handled the installation of XSLT filter descriptions packaged in Java Archive (JAR) files, as well as the installation of OpenOffice.org Extension (.oxt) files. An attacker could use these flaws to create a specially-crafted XSLT filter description or extension file that, when opened, would cause the OpenOffice.org Extension Manager to modify files accessible to the user installing the JAR or extension file. (CVE-2010-3450)

 A flaw was found in the script that launches OpenOffice.org. In some situations, a . character could be included in the LD_LIBRARY_PATH variable, allowing a local attacker to execute arbitrary code with the privileges of the user running OpenOffice.org, if that user ran OpenOffice.org from within an attacker-controlled directory.
 (CVE-2010-3689)

 Red Hat would like to thank OpenOffice.org for reporting the CVE-2010-3451, CVE-2010-3452, CVE-2010-3453, CVE-2010-3454, and CVE-2010-4643 issues; and Dmitri Gribenko for reporting the CVE-2010-3689 issue. Upstream acknowledges Dan Rosenberg of Virtual Security Research as the original reporter of the CVE-2010-3451, CVE-2010-3452, CVE-2010-3453, and CVE-2010-3454 issues.

 This update also fixes the following bug:

 * OpenOffice.org did not create a lock file when opening a file that was on a share mounted via SFTP. Additionally, if there was a lock file, it was ignored. This could result in data loss if a file in this situation was opened simultaneously by another user. (BZ#671087)

 All OpenOffice.org users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. All running instances of OpenOffice.org applications must be restarted for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the RHEL openoffice.org package based on the guidance in RHSA-2011:0183.

See Also

http://www.nessus.org/u?867c4ac4

https://access.redhat.com/security/updates/classification/#important

https://bugzilla.redhat.com/show_bug.cgi?id=602324

https://bugzilla.redhat.com/show_bug.cgi?id=640241

https://bugzilla.redhat.com/show_bug.cgi?id=640950

https://bugzilla.redhat.com/show_bug.cgi?id=640954

https://bugzilla.redhat.com/show_bug.cgi?id=641224

https://bugzilla.redhat.com/show_bug.cgi?id=641282

https://bugzilla.redhat.com/show_bug.cgi?id=658259

https://bugzilla.redhat.com/show_bug.cgi?id=667588

https://bugzilla.redhat.com/show_bug.cgi?id=671087

https://access.redhat.com/errata/RHSA-2011:0183

Plugin Details

Severity: High

ID: 51827

File Name: redhat-RHSA-2011-0183.nasl

Version: 1.20

Type: local

Agent: unix

Published: 1/31/2011

Updated: 11/4/2024

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

Vendor

Vendor Severity: Important

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2010-4643

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS Score Source: CVE-2010-3689

Vulnerability Information

CPE: p-cpe:/a:redhat:enterprise_linux:autocorr-cs, p-cpe:/a:redhat:enterprise_linux:openoffice.org-calc-core, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-mr_in, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-ss_za, p-cpe:/a:redhat:enterprise_linux:openoffice.org-ure, p-cpe:/a:redhat:enterprise_linux:openoffice.org-brand, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-ko_kr, cpe:/o:redhat:enterprise_linux:6, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-st_za, p-cpe:/a:redhat:enterprise_linux:openoffice.org-pyuno, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-cy_gb, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-sk_sk, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-bn, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-de, p-cpe:/a:redhat:enterprise_linux:openoffice.org-presenter-screen, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-sv, p-cpe:/a:redhat:enterprise_linux:autocorr-bg, p-cpe:/a:redhat:enterprise_linux:autocorr-pl, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-te_in, p-cpe:/a:redhat:enterprise_linux:broffice.org-brand, p-cpe:/a:redhat:enterprise_linux:autocorr-sk, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-ts_za, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-ta_in, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-zu_za, p-cpe:/a:redhat:enterprise_linux:openoffice.org-testtools, p-cpe:/a:redhat:enterprise_linux:autocorr-lt, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-th_th, p-cpe:/a:redhat:enterprise_linux:autocorr-sv, p-cpe:/a:redhat:enterprise_linux:autocorr-ga, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-kn_in, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-as_in, p-cpe:/a:redhat:enterprise_linux:autocorr-fa, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-sr, p-cpe:/a:redhat:enterprise_linux:autocorr-fr, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-dz, p-cpe:/a:redhat:enterprise_linux:autocorr-en, p-cpe:/a:redhat:enterprise_linux:openoffice.org-impress, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-cs_cz, p-cpe:/a:redhat:enterprise_linux:openoffice.org-draw, p-cpe:/a:redhat:enterprise_linux:openoffice.org-graphicfilter, p-cpe:/a:redhat:enterprise_linux:openoffice.org-ogltrans, p-cpe:/a:redhat:enterprise_linux:openoffice.org-presentation-minimizer, p-cpe:/a:redhat:enterprise_linux:autocorr-ko, p-cpe:/a:redhat:enterprise_linux:broffice.org-draw, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-nn_no, p-cpe:/a:redhat:enterprise_linux:openoffice.org-devel, p-cpe:/a:redhat:enterprise_linux:autocorr-de, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-mai_in, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-or_in, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-ru, p-cpe:/a:redhat:enterprise_linux:autocorr-fi, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-nl, p-cpe:/a:redhat:enterprise_linux:broffice.org-impress, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-hr_hr, p-cpe:/a:redhat:enterprise_linux:openoffice.org-base-core, p-cpe:/a:redhat:enterprise_linux:openoffice.org-opensymbol-fonts, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-xh_za, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-tr_tr, p-cpe:/a:redhat:enterprise_linux:autocorr-pt, p-cpe:/a:redhat:enterprise_linux:openoffice.org-base, p-cpe:/a:redhat:enterprise_linux:autocorr-vi, p-cpe:/a:redhat:enterprise_linux:openoffice.org-wiki-publisher, p-cpe:/a:redhat:enterprise_linux:autocorr-hu, p-cpe:/a:redhat:enterprise_linux:autocorr-zh, p-cpe:/a:redhat:enterprise_linux:autocorr-mn, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-ve_za, p-cpe:/a:redhat:enterprise_linux:openoffice.org-rhino, p-cpe:/a:redhat:enterprise_linux:broffice.org-writer, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-es, p-cpe:/a:redhat:enterprise_linux:autocorr-it, p-cpe:/a:redhat:enterprise_linux:openoffice.org-writer-core, p-cpe:/a:redhat:enterprise_linux:broffice.org-calc, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-nb_no, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-en, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-el_gr, p-cpe:/a:redhat:enterprise_linux:autocorr-da, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-nr_za, p-cpe:/a:redhat:enterprise_linux:openoffice.org-javafilter, p-cpe:/a:redhat:enterprise_linux:openoffice.org-math, p-cpe:/a:redhat:enterprise_linux:openoffice.org-pdfimport, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-it, p-cpe:/a:redhat:enterprise_linux:openoffice.org-emailmerge, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-hu_hu, p-cpe:/a:redhat:enterprise_linux:openoffice.org-draw-core, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-pl_pl, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-sl_si, p-cpe:/a:redhat:enterprise_linux:openoffice.org, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-zh_cn, p-cpe:/a:redhat:enterprise_linux:autocorr-af, p-cpe:/a:redhat:enterprise_linux:openoffice.org-bsh, p-cpe:/a:redhat:enterprise_linux:openoffice.org-math-core, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-gl_es, p-cpe:/a:redhat:enterprise_linux:broffice.org-base, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-pa, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-pt_pt, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-hi_in, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-ur, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-af_za, p-cpe:/a:redhat:enterprise_linux:openoffice.org-writer, p-cpe:/a:redhat:enterprise_linux:openoffice.org-sdk, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-ro, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-ar, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-pt_br, p-cpe:/a:redhat:enterprise_linux:autocorr-ru, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-et_ee, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-tn_za, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-nso_za, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-da_dk, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-lt_lt, p-cpe:/a:redhat:enterprise_linux:autocorr-ja, p-cpe:/a:redhat:enterprise_linux:broffice.org-math, p-cpe:/a:redhat:enterprise_linux:openoffice.org-headless, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-he_il, p-cpe:/a:redhat:enterprise_linux:autocorr-eu, p-cpe:/a:redhat:enterprise_linux:openoffice.org-core, p-cpe:/a:redhat:enterprise_linux:openoffice.org-calc, p-cpe:/a:redhat:enterprise_linux:autocorr-es, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-fi_fi, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-gu_in, p-cpe:/a:redhat:enterprise_linux:autocorr-sl, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-eu_es, p-cpe:/a:redhat:enterprise_linux:openoffice.org-report-builder, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-bg_bg, p-cpe:/a:redhat:enterprise_linux:autocorr-nl, p-cpe:/a:redhat:enterprise_linux:openoffice.org-impress-core, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-ga_ie, p-cpe:/a:redhat:enterprise_linux:autocorr-lb, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-zh_tw, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-ja_jp, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-ca_es, p-cpe:/a:redhat:enterprise_linux:openoffice.org-sdk-doc, p-cpe:/a:redhat:enterprise_linux:openoffice.org-xsltfilter, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-fr, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-ms_my, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-uk, p-cpe:/a:redhat:enterprise_linux:autocorr-tr, p-cpe:/a:redhat:enterprise_linux:openoffice.org-langpack-ml_in

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Patch Publication Date: 1/28/2011

Vulnerability Publication Date: 1/28/2011

Reference Information

CVE: CVE-2010-3450, CVE-2010-3451, CVE-2010-3452, CVE-2010-3453, CVE-2010-3454, CVE-2010-3689, CVE-2010-4253, CVE-2010-4643

CWE: 122

RHSA: 2011:0183