The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1426 advisory.

    OpenOffice.org is an office productivity suite that includes desktop     applications, such as a word processor, spreadsheet, presentation manager,     formula editor, and a drawing program.

    An integer underflow flaw and a boundary error flaw, both possibly leading     to a heap-based buffer overflow, were found in the way OpenOffice.org     parses certain records in Microsoft Word documents. An attacker could     create a specially-crafted Microsoft Word document, which once opened by an     unsuspecting user, could cause OpenOffice.org to crash or, potentially,     execute arbitrary code with the permissions of the user running     OpenOffice.org. (CVE-2009-0200, CVE-2009-0201)

    All users of OpenOffice.org are advised to upgrade to these updated     packages, which contain backported patches to correct these issues. All     running instances of OpenOffice.org applications must be restarted for     this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 4 / 5 : openoffice.org (RHSA-2009:1426)

high Nessus Plugin ID 63895

Version 1.19