ID de Prueba:	1.3.6.1.4.1.25623.1.0.61809
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2008:0939
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2008:0939. OpenOffice.org is an office productivity suite that includes desktop applications such as a word processor, spreadsheet, presentation manager, formula editor, and drawing program. SureRun Security Team discovered an integer overflow flaw leading to a heap buffer overflow in the Windows Metafile (WMF) image format parser. An attacker could create a carefully crafted document containing a malicious WMF file that could cause OpenOffice.org to crash, or, possibly, execute arbitrary code if opened by a victim. (CVE-2008-2237) Multiple integer overflow flaws were found in the Enhanced Windows Metafile (EMF) parser. An attacker could create a carefully crafted document containing a malicious EMF file that could cause OpenOffice.org to crash, or, possibly, execute arbitrary code if opened by a victim. (CVE-2008-2238) All users of OpenOffice.org are advised to upgrade to these updated packages, which contain backported patches that correct these issues. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2008-0939.html http://www.redhat.com/security/updates/classification/#important Risk factor : Critical CVSS Score: 9.3
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-2237 BugTraq ID: 31962 http://www.securityfocus.com/bid/31962 Debian Security Information: DSA-1661 (Google Search) http://www.debian.org/security/2008/dsa-1661 https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00905.html https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00923.html http://security.gentoo.org/glsa/glsa-200812-13.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10784 http://www.redhat.com/support/errata/RHSA-2008-0939.html http://www.securitytracker.com/id?1021120 http://secunia.com/advisories/32419 http://secunia.com/advisories/32461 http://secunia.com/advisories/32463 http://secunia.com/advisories/32489 http://secunia.com/advisories/32676 http://secunia.com/advisories/32856 http://secunia.com/advisories/32872 http://secunia.com/advisories/33140 http://sunsolve.sun.com/search/document.do?assetkey=1-26-242627-1 SuSE Security Announcement: SUSE-SR:2008:026 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html http://www.ubuntu.com/usn/usn-677-1 http://www.ubuntu.com/usn/usn-677-2 http://www.vupen.com/english/advisories/2008/2947 http://www.vupen.com/english/advisories/2008/3103 XForce ISS Database: openoffice-wmf-bo(46165) https://exchange.xforce.ibmcloud.com/vulnerabilities/46165 Common Vulnerability Exposure (CVE) ID: CVE-2008-2238 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=750 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10849 http://www.securitytracker.com/id?1021121 http://sunsolve.sun.com/search/document.do?assetkey=1-26-243226-1 http://www.vupen.com/english/advisories/2008/3153 XForce ISS Database: openoffice-emf-file-bo(46166) https://exchange.xforce.ibmcloud.com/vulnerabilities/46166
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.