Detections
Analytics
Scientific Linux Security Update : openoffice.org on SL3.x, SL4.x i386/x86_64
high Nessus Plugin ID 60389
Language:
Synopsis
The remote Scientific Linux host is missing one or more security updates.Description
A heap overflow flaw was found in the EMF parser. An attacker could create a carefully crafted EMF file that could cause OpenOffice.org to crash or possibly execute arbitrary code if the malicious EMF image was added to a document or if a document containing the malicious EMF file was opened by a victim. (CVE-2007-5746)A heap overflow flaw was found in the OLE Structured Storage file parser. (OLE Structured Storage is a format used by Microsoft Office documents.) An attacker could create a carefully crafted OLE file that could cause OpenOffice.org to crash or possibly execute arbitrary code if the file was opened by a victim. (CVE-2008-0320)
Solution
Update the affected packages.See Also
Plugin Details
Severity: High
ID: 60389
File Name: sl_20080417_openoffice_org_on_SL3_x.nasl
Version: 1.9
Type: local
Agent: unix
Published: 8/1/2012
Updated: 1/14/2021
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 8.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: x-cpe:/o:fermilab:scientific_linux
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 4/17/2008
Exploitable With
Core Impact
Metasploit (OpenOffice OLE Importer DocumentSummaryInformation Stream Handling Overflow)
Reference Information
CVE: CVE-2007-5746, CVE-2008-0320