The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0411 advisory.

    OpenOffice.org is an office productivity suite that includes desktop     applications, such as a word processor, spreadsheet application,     presentation manager, formula editor, and a drawing program. OpenOffice.org     embeds a copy of Raptor, which provides parsers for Resource Description     Framework (RDF) files.

    An XML External Entity expansion flaw was found in the way Raptor processed     RDF files. If OpenOffice.org were to open a specially-crafted file (such     as an OpenDocument Format or OpenDocument Presentation file), it could     possibly allow a remote attacker to obtain a copy of an arbitrary local     file that the user running OpenOffice.org had access to. A bug in the way     Raptor handled external entities could cause OpenOffice.org to crash or,     possibly, execute arbitrary code with the privileges of the user running     OpenOffice.org. (CVE-2012-0037)

    Red Hat would like to thank Timothy D. Morgan of VSR for reporting this     issue.

    All OpenOffice.org users are advised to upgrade to these updated packages,     which contain backported patches to correct this issue. All running     instances of OpenOffice.org applications must be restarted for this update     to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 5 : openoffice.org (RHSA-2012:0411)

medium Nessus Plugin ID 58442

Version 1.25

Version 1.24

Version 1.25 Nov 5, 2024, 12:50 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202411051250
Version 1.24 Apr 21, 2024, 10:16 AM CVSS metrics ("CVSSv3 score" set to 6.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") CVSSv2 score source (set to "CVE-2012-0037") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202404211016