The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0183 advisory.

    - CVE-2010-4643 heap based buffer overflow when parsing TGA files
    - CVE-2010-4253 heap based buffer overflow in PPT import
    - CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter       descriptions and OXT extension files
    - CVE-2010-3451 Array index error by insecure parsing of broken rtf       tables
    - CVE-2010-3452 Integer signedness error (crash) by processing certain       RTF tags
    - CVE-2010-3453 Heap-based buffer overflow by processing *.doc files       with WW8 list styles with specially-crafted count of list levels
    - CVE-2010-3454 Array index error by scanning document typography       information of certain *.doc files

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 6 : openoffice.org (ELSA-2011-0183)

high Nessus Plugin ID 68190

Version 1.10