Test Kennung:	1.3.6.1.4.1.25623.1.0.57077
Kategorie:	Mandrake Local Security Checks
Titel:	Mandrake Security Advisory MDKSA-2006:118 (OpenOffice.org)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to OpenOffice.org announced via advisory MDKSA-2006:118. OpenOffice.org 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-complicit attackers to conduct unauthorized activities via an OpenOffice document with a malicious BASIC macro, which is executed without prompting the user. (CVE-2006-2198) An unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-complicit attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents. (CVE-2006-2199) Heap-based buffer overflow in OpenOffice.org 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-complicit attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka File Format / Buffer Overflow Vulnerability. (CVE-2006-3117) Updated packages are patched to address this issue. Affected: 2006.0, Corporate 3.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2006:118 Risk factor : High CVSS Score: 7.6
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2006-2198 BugTraq ID: 18738 http://www.securityfocus.com/bid/18738 Bugtraq: 20060926 rPSA-2006-0173-1 openoffice.org (Google Search) http://www.securityfocus.com/archive/1/447035/100/0/threaded CERT/CC vulnerability note: VU#170113 http://www.kb.cert.org/vuls/id/170113 Debian Security Information: DSA-1104 (Google Search) http://www.debian.org/security/2006/dsa-1104 http://fedoranews.org/cms/node/2343 http://security.gentoo.org/glsa/glsa-200607-12.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:118 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11082 http://www.redhat.com/support/errata/RHSA-2006-0573.html http://securitytracker.com/id?1016414 http://secunia.com/advisories/20867 http://secunia.com/advisories/20893 http://secunia.com/advisories/20910 http://secunia.com/advisories/20911 http://secunia.com/advisories/20913 http://secunia.com/advisories/20975 http://secunia.com/advisories/20995 http://secunia.com/advisories/21278 http://secunia.com/advisories/22129 http://secunia.com/advisories/23620 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102490-1 SuSE Security Announcement: SUSE-SA:2006:040 (Google Search) http://www.novell.com/linux/security/advisories/2006_40_openoffice.html http://www.ubuntu.com/usn/usn-313-1 http://www.ubuntu.com/usn/usn-313-2 http://www.vupen.com/english/advisories/2006/2607 http://www.vupen.com/english/advisories/2006/2621 XForce ISS Database: openoffice-macro-code-execution(27564) https://exchange.xforce.ibmcloud.com/vulnerabilities/27564 Common Vulnerability Exposure (CVE) ID: CVE-2006-2199 BugTraq ID: 18737 http://www.securityfocus.com/bid/18737 CERT/CC vulnerability note: VU#243681 http://www.kb.cert.org/vuls/id/243681 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11338 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102475-1 XForce ISS Database: openoffice-applet-sandbox-bypass(27569) https://exchange.xforce.ibmcloud.com/vulnerabilities/27569 Common Vulnerability Exposure (CVE) ID: CVE-2006-3117 BugTraq ID: 18739 http://www.securityfocus.com/bid/18739 http://www.ngssoftware.com/advisories/openoffice.txt https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9704 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102501-1 XForce ISS Database: openoffice-xml-document-bo(27571) https://exchange.xforce.ibmcloud.com/vulnerabilities/27571
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.