Test ID:	1.3.6.1.4.1.25623.1.0.121263
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 201408-19
Summary:	Gentoo Linux Local Security Checks GLSA 201408-19
Description:	Summary: Gentoo Linux Local Security Checks GLSA 201408-19 Vulnerability Insight: Multiple vulnerabilities have been discovered in OpenOffice and Libreoffice. Please review the CVE identifiers referenced below for details. Solution: Update the affected packages to the latest available version. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-4339 1000148 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000148.1-1 1016791 http://securitytracker.com/id?1016791 1017522 http://securitytracker.com/id?1017522 102648 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1 102656 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102656-1 102657 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102657-1 102686 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102686-1 102696 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102696-1 102722 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102722-1 102744 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102744-1 102759 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102759-1 19849 http://www.securityfocus.com/bid/19849 20060901-01-P ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc 20060905 rPSA-2006-0163-1 openssl openssl-scripts http://www.securityfocus.com/archive/1/445231/100/0/threaded 20060912 ERRATA: [ GLSA 200609-05 ] OpenSSL, AMD64 x86 emulation base libraries: RSA signature forgery http://www.securityfocus.com/archive/1/445822/100/0/threaded 20061108 Multiple Vulnerabilities in OpenSSL Library http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html 20061108 Multiple Vulnerabilities in OpenSSL library http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml 20070110 VMware ESX server security updates http://www.securityfocus.com/archive/1/456546/100/200/threaded 200708 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200708-1 20080318 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues http://www.securityfocus.com/archive/1/489739/100/0/threaded 201247 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201247-1 201534 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1 21709 http://secunia.com/advisories/21709 21767 http://secunia.com/advisories/21767 21776 http://secunia.com/advisories/21776 21778 http://secunia.com/advisories/21778 21785 http://secunia.com/advisories/21785 21791 http://secunia.com/advisories/21791 21812 http://secunia.com/advisories/21812 21823 http://secunia.com/advisories/21823 21846 http://secunia.com/advisories/21846 21852 http://secunia.com/advisories/21852 21870 http://secunia.com/advisories/21870 21873 http://secunia.com/advisories/21873 21906 http://secunia.com/advisories/21906 21927 http://secunia.com/advisories/21927 21930 http://secunia.com/advisories/21930 21982 http://secunia.com/advisories/21982 22036 http://secunia.com/advisories/22036 22044 http://secunia.com/advisories/22044 22066 http://secunia.com/advisories/22066 22083 http://www.securityfocus.com/bid/22083 22161 http://secunia.com/advisories/22161 22226 http://secunia.com/advisories/22226 22232 http://secunia.com/advisories/22232 22259 http://secunia.com/advisories/22259 22260 http://secunia.com/advisories/22260 22284 http://secunia.com/advisories/22284 22325 http://secunia.com/advisories/22325 22446 http://secunia.com/advisories/22446 22509 http://secunia.com/advisories/22509 22513 http://secunia.com/advisories/22513 22523 http://secunia.com/advisories/22523 22545 http://secunia.com/advisories/22545 22585 http://secunia.com/advisories/22585 22671 http://secunia.com/advisories/22671 22689 http://secunia.com/advisories/22689 22711 http://secunia.com/advisories/22711 22733 http://secunia.com/advisories/22733 22758 http://secunia.com/advisories/22758 22799 http://secunia.com/advisories/22799 22932 http://secunia.com/advisories/22932 22934 http://secunia.com/advisories/22934 22936 http://secunia.com/advisories/22936 22937 http://secunia.com/advisories/22937 22938 http://secunia.com/advisories/22938 22939 http://secunia.com/advisories/22939 22940 http://secunia.com/advisories/22940 22948 http://secunia.com/advisories/22948 22949 http://secunia.com/advisories/22949 23155 http://secunia.com/advisories/23155 23455 http://secunia.com/advisories/23455 23680 http://secunia.com/advisories/23680 23794 http://secunia.com/advisories/23794 23841 http://secunia.com/advisories/23841 23915 http://secunia.com/advisories/23915 24099 http://secunia.com/advisories/24099 24930 http://secunia.com/advisories/24930 24950 http://secunia.com/advisories/24950 25284 http://secunia.com/advisories/25284 25399 http://secunia.com/advisories/25399 25649 http://secunia.com/advisories/25649 26329 http://secunia.com/advisories/26329 26893 http://secunia.com/advisories/26893 28115 http://secunia.com/advisories/28115 28276 http://www.securityfocus.com/bid/28276 28549 http://www.osvdb.org/28549 31492 http://secunia.com/advisories/31492 38567 http://secunia.com/advisories/38567 38568 http://secunia.com/advisories/38568 41818 http://secunia.com/advisories/41818 60799 http://secunia.com/advisories/60799 ADV-2006-3453 http://www.vupen.com/english/advisories/2006/3453 ADV-2006-3566 http://www.vupen.com/english/advisories/2006/3566 ADV-2006-3730 http://www.vupen.com/english/advisories/2006/3730 ADV-2006-3748 http://www.vupen.com/english/advisories/2006/3748 ADV-2006-3793 http://www.vupen.com/english/advisories/2006/3793 ADV-2006-3899 http://www.vupen.com/english/advisories/2006/3899 ADV-2006-3936 http://www.vupen.com/english/advisories/2006/3936 ADV-2006-4205 http://www.vupen.com/english/advisories/2006/4205 ADV-2006-4206 http://www.vupen.com/english/advisories/2006/4206 ADV-2006-4207 http://www.vupen.com/english/advisories/2006/4207 ADV-2006-4216 http://www.vupen.com/english/advisories/2006/4216 ADV-2006-4327 http://www.vupen.com/english/advisories/2006/4327 ADV-2006-4329 http://www.vupen.com/english/advisories/2006/4329 ADV-2006-4366 http://www.vupen.com/english/advisories/2006/4366 ADV-2006-4417 http://www.vupen.com/english/advisories/2006/4417 ADV-2006-4586 http://www.vupen.com/english/advisories/2006/4586 ADV-2006-4744 http://www.vupen.com/english/advisories/2006/4744 ADV-2006-4750 http://www.vupen.com/english/advisories/2006/4750 ADV-2006-5146 http://www.vupen.com/english/advisories/2006/5146 ADV-2007-0254 http://www.vupen.com/english/advisories/2007/0254 ADV-2007-0343 http://www.vupen.com/english/advisories/2007/0343 ADV-2007-1401 http://www.vupen.com/english/advisories/2007/1401 ADV-2007-1815 http://www.vupen.com/english/advisories/2007/1815 ADV-2007-1945 http://www.vupen.com/english/advisories/2007/1945 ADV-2007-2163 http://www.vupen.com/english/advisories/2007/2163 ADV-2007-2315 http://www.vupen.com/english/advisories/2007/2315 ADV-2007-2783 http://www.vupen.com/english/advisories/2007/2783 ADV-2007-4224 http://www.vupen.com/english/advisories/2007/4224 ADV-2008-0905 http://www.vupen.com/english/advisories/2008/0905/references ADV-2010-0366 http://www.vupen.com/english/advisories/2010/0366 APPLE-SA-2006-11-28 http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html APPLE-SA-2007-12-14 http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html BEA07-169.00 http://dev2dev.bea.com/pub/advisory/238 DSA-1173 http://www.us.debian.org/security/2006/dsa-1173 DSA-1174 http://www.debian.org/security/2006/dsa-1174 FreeBSD-SA-06:19 http://security.freebsd.org/advisories/FreeBSD-SA-06:19.openssl.asc GLSA-200609-05 http://security.gentoo.org/glsa/glsa-200609-05.xml GLSA-200609-18 http://security.gentoo.org/glsa/glsa-200609-18.xml GLSA-200610-06 http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml GLSA-201408-19 http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml HPSBMA02250 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 HPSBOV02683 http://marc.info/?l=bugtraq&m=130497311408250&w=2 HPSBTU02207 https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 HPSBUX02153 http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742 HPSBUX02165 http://www.securityfocus.com/archive/1/450327/100/0/threaded HPSBUX02186 http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 HPSBUX02219 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 JVN#51615542 http://jvn.jp/en/jp/JVN51615542/index.html JVNDB-2012-000079 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000079.html MDKSA-2006:161 http://www.mandriva.com/security/advisories?name=MDKSA-2006:161 MDKSA-2006:177 http://www.mandriva.com/security/advisories?name=MDKSA-2006:177 MDKSA-2006:178 http://www.mandriva.com/security/advisories?name=MDKSA-2006:178 MDKSA-2006:207 http://www.mandriva.com/security/advisories?name=MDKSA-2006:207 OpenPKG-SA-2006.018 http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.018.html OpenPKG-SA-2006.029 http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.029-bind.html RHSA-2006:0661 http://www.redhat.com/support/errata/RHSA-2006-0661.html RHSA-2007:0062 http://www.redhat.com/support/errata/RHSA-2007-0062.html RHSA-2007:0072 http://www.redhat.com/support/errata/RHSA-2007-0072.html RHSA-2007:0073 http://www.redhat.com/support/errata/RHSA-2007-0073.html RHSA-2008:0629 http://www.redhat.com/support/errata/RHSA-2008-0629.html SSA:2006-257-02 http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.605306 SSA:2006-310-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.566955 SSRT061181 SSRT061213 SSRT061239 SSRT061266 SSRT061273 SSRT061275 SSRT071299 SSRT071304 SSRT090208 SUSE-SA:2006:055 http://www.novell.com/linux/security/advisories/2006_55_ssl.html SUSE-SA:2006:061 http://www.novell.com/linux/security/advisories/2006_61_opera.html SUSE-SA:2007:010 http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html SUSE-SR:2006:026 http://www.novell.com/linux/security/advisories/2006_26_sr.html TA06-333A http://www.us-cert.gov/cas/techalerts/TA06-333A.html USN-339-1 http://www.ubuntu.com/usn/usn-339-1 VU#845620 http://www.kb.cert.org/vuls/id/845620 [3.9] 20060908 011: SECURITY FIX: September 8, 2006 http://www.openbsd.org/errata.html [bind-announce] 20061103 Internet Systems Consortium Security Advisory. [revised] http://marc.info/?l=bind-announce&m=116253119512445&w=2 [ietf-openpgp] 20060827 Bleichenbacher's RSA signature forgery based on implementation error http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html [security-announce] 20080317 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues http://lists.vmware.com/pipermail/security-announce/2008/000008.html http://docs.info.apple.com/article.html?artnum=304829 http://docs.info.apple.com/article.html?artnum=307177 http://openvpn.net/changelog.html http://support.attachmate.com/techdocs/2127.html http://support.attachmate.com/techdocs/2128.html http://support.attachmate.com/techdocs/2137.html http://support.avaya.com/elmodocs2/security/ASA-2006-188.htm http://www.arkoon.fr/upload/alertes/40AK-2006-04-FR-1.1_SSL360_OPENSSL_RSA.pdf http://www.bluecoat.com/support/knowledge/openSSL_RSA_Signature_forgery.html http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/ http://www.openoffice.org/security/cves/CVE-2006-4339.html http://www.openssl.org/news/secadv_20060905.txt http://www.opera.com/support/search/supsearch.dml?index=845 http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html http://www.serv-u.com/releasenotes/ http://www.sybase.com/detail?id=1047991 http://www.vmware.com/security/advisories/VMSA-2008-0005.html http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html http://www.vmware.com/support/player/doc/releasenotes_player.html http://www.vmware.com/support/player2/doc/releasenotes_player2.html http://www.vmware.com/support/server/doc/releasenotes_server.html http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117 https://issues.rpath.com/browse/RPL-1633 https://issues.rpath.com/browse/RPL-616 https://secure-support.novell.com/KanisaPlatform/Publishing/41/3143224_f.SAL_Public.html openssl-rsa-security-bypass(28755) https://exchange.xforce.ibmcloud.com/vulnerabilities/28755 oval:org.mitre.oval:def:11656 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11656 Common Vulnerability Exposure (CVE) ID: CVE-2009-0200 BugTraq ID: 36200 http://www.securityfocus.com/bid/36200 Bugtraq: 20090901 Secunia Research: OpenOffice.org Word Document Table Parsing Integer Underflow (Google Search) http://www.securityfocus.com/archive/1/506194/100/0/threaded Debian Security Information: DSA-1880 (Google Search) http://www.debian.org/security/2009/dsa-1880 http://www.mandriva.com/security/advisories?name=MDVSA-2010:035 http://www.mandriva.com/security/advisories?name=MDVSA-2010:091 http://www.mandriva.com/security/advisories?name=MDVSA-2010:105 http://development.openoffice.org/releases/3.1.1.html http://secunia.com/secunia_research/2009-26/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10881 http://secunia.com/advisories/35036 http://secunia.com/advisories/36750 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020715.1-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-263508-1 SuSE Security Announcement: SUSE-SR:2009:015 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html http://www.vupen.com/english/advisories/2009/2490 Common Vulnerability Exposure (CVE) ID: CVE-2009-0201 Bugtraq: 20090901 Secunia Research: OpenOffice.org Word Document Table Parsing Buffer Overflow (Google Search) http://www.securityfocus.com/archive/1/506195/100/0/threaded http://secunia.com/secunia_research/2009-27/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10726 http://www.securitytracker.com/id?1022798 Common Vulnerability Exposure (CVE) ID: CVE-2009-0217 AIX APAR: PK80596 http://www-01.ibm.com/support/docview.wss?rs=180&context=SSEQTP&dc=D400&uid=swg24023545&loc=en_US&cs=UTF-8&lang=en&rss=ct180websphere AIX APAR: PK80627 http://www-01.ibm.com/support/docview.wss?rs=180&context=SSEQTP&dc=D400&uid=swg24023723&loc=en_US&cs=UTF-8&lang=en&rss=ct180websphere http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html BugTraq ID: 35671 http://www.securityfocus.com/bid/35671 Cert/CC Advisory: TA09-294A http://www.us-cert.gov/cas/techalerts/TA09-294A.html Cert/CC Advisory: TA10-159B http://www.us-cert.gov/cas/techalerts/TA10-159B.html CERT/CC vulnerability note: VU#466161 http://www.kb.cert.org/vuls/id/466161 Debian Security Information: DSA-1995 (Google Search) http://www.debian.org/security/2010/dsa-1995 https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00494.html https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00505.html HPdes Security Advisory: HPSBUX02476 http://marc.info/?l=bugtraq&m=125787273209737&w=2 HPdes Security Advisory: SSRT090250 http://www.mandriva.com/security/advisories?name=MDVSA-2009:209 http://www.w3.org/QA/2009/07/hmac_truncation_in_xml_signatu.html Microsoft Security Bulletin: MS10-041 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-041 http://osvdb.org/55895 http://osvdb.org/55907 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10186 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7158 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8717 RedHat Security Advisories: RHSA-2009:1200 https://rhn.redhat.com/errata/RHSA-2009-1200.html RedHat Security Advisories: RHSA-2009:1201 https://rhn.redhat.com/errata/RHSA-2009-1201.html RedHat Security Advisories: RHSA-2009:1428 https://rhn.redhat.com/errata/RHSA-2009-1428.html RedHat Security Advisories: RHSA-2009:1636 https://rhn.redhat.com/errata/RHSA-2009-1636.html RedHat Security Advisories: RHSA-2009:1637 https://rhn.redhat.com/errata/RHSA-2009-1637.html RedHat Security Advisories: RHSA-2009:1649 https://rhn.redhat.com/errata/RHSA-2009-1649.html RedHat Security Advisories: RHSA-2009:1650 https://rhn.redhat.com/errata/RHSA-2009-1650.html http://www.redhat.com/support/errata/RHSA-2009-1694.html http://www.securitytracker.com/id?1022561 http://www.securitytracker.com/id?1022567 http://www.securitytracker.com/id?1022661 http://secunia.com/advisories/34461 http://secunia.com/advisories/35776 http://secunia.com/advisories/35852 http://secunia.com/advisories/35853 http://secunia.com/advisories/35854 http://secunia.com/advisories/35855 http://secunia.com/advisories/35858 http://secunia.com/advisories/36162 http://secunia.com/advisories/36176 http://secunia.com/advisories/36180 http://secunia.com/advisories/36494 http://secunia.com/advisories/37300 http://secunia.com/advisories/37671 http://secunia.com/advisories/37841 http://secunia.com/advisories/38695 http://secunia.com/advisories/38921 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020710.1-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-263429-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-269208-1 SuSE Security Announcement: SUSE-SA:2009:053 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html SuSE Security Announcement: SUSE-SA:2010:017 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html https://usn.ubuntu.com/826-1/ http://www.ubuntu.com/usn/USN-903-1 http://www.vupen.com/english/advisories/2009/1900 http://www.vupen.com/english/advisories/2009/1908 http://www.vupen.com/english/advisories/2009/1909 http://www.vupen.com/english/advisories/2009/1911 http://www.vupen.com/english/advisories/2009/2543 http://www.vupen.com/english/advisories/2009/3122 http://www.vupen.com/english/advisories/2010/0635 Common Vulnerability Exposure (CVE) ID: CVE-2009-2949 BugTraq ID: 38218 http://www.securityfocus.com/bid/38218 Cert/CC Advisory: TA10-287A http://www.us-cert.gov/cas/techalerts/TA10-287A.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:221 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10176 http://www.redhat.com/support/errata/RHSA-2010-0101.html http://securitytracker.com/id?1023591 http://www.vupen.com/english/advisories/2010/2905 XForce ISS Database: openoffice-xpm-bo(56236) https://exchange.xforce.ibmcloud.com/vulnerabilities/56236 Common Vulnerability Exposure (CVE) ID: CVE-2009-2950 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11050 XForce ISS Database: openoffice-gif-bo(56238) https://exchange.xforce.ibmcloud.com/vulnerabilities/56238 Common Vulnerability Exposure (CVE) ID: CVE-2009-3301 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10423 XForce ISS Database: openoffice-word-sprmtdeftable-bo(56240) https://exchange.xforce.ibmcloud.com/vulnerabilities/56240 Common Vulnerability Exposure (CVE) ID: CVE-2009-3302 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10022 XForce ISS Database: openoffice-word-sprmtsetbrc-bo(56241) https://exchange.xforce.ibmcloud.com/vulnerabilities/56241 Common Vulnerability Exposure (CVE) ID: CVE-2010-0395 Debian Security Information: DSA-2055 (Google Search) http://www.debian.org/security/2010/dsa-2055 http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042468.html http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042529.html http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042534.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11091 http://www.redhat.com/support/errata/RHSA-2010-0459.html http://secunia.com/advisories/40070 http://secunia.com/advisories/40084 http://secunia.com/advisories/40104 http://secunia.com/advisories/40107 SuSE Security Announcement: SUSE-SR:2010:014 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html http://ubuntu.com/usn/usn-949-1 http://www.vupen.com/english/advisories/2010/1350 http://www.vupen.com/english/advisories/2010/1353 http://www.vupen.com/english/advisories/2010/1366 http://www.vupen.com/english/advisories/2010/1369 Common Vulnerability Exposure (CVE) ID: CVE-2010-2935 1024352 http://www.securitytracker.com/id?1024352 1024976 http://www.securitytracker.com/id?1024976 40775 http://secunia.com/advisories/40775 41052 http://secunia.com/advisories/41052 41235 http://secunia.com/advisories/41235 42927 http://secunia.com/advisories/42927 43105 http://secunia.com/advisories/43105 ADV-2010-2003 http://www.vupen.com/english/advisories/2010/2003 ADV-2010-2149 http://www.vupen.com/english/advisories/2010/2149 ADV-2010-2228 http://www.vupen.com/english/advisories/2010/2228 ADV-2010-2905 ADV-2011-0150 http://www.vupen.com/english/advisories/2011/0150 ADV-2011-0230 http://www.vupen.com/english/advisories/2011/0230 ADV-2011-0279 http://www.vupen.com/english/advisories/2011/0279 DSA-2099 http://www.debian.org/security/2010/dsa-2099 MDVSA-2010:221 RHSA-2010:0643 http://www.redhat.com/support/errata/RHSA-2010-0643.html SUSE-SR:2010:019 http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html SUSE-SR:2010:024 http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html USN-1056-1 http://ubuntu.com/usn/usn-1056-1 [dev] 20100806 Two exploitable OpenOffice.org bugs! http://www.openoffice.org/servlets/ReadMsg?list=dev&msgNo=27690 [oss-security] 20100811 CVE Request -- OpenOffice.org [two ids]: 1, integer truncation error 2, short integer overflow http://www.openwall.com/lists/oss-security/2010/08/11/1 [oss-security] 20100811 Re: CVE Request -- OpenOffice.org [two ids]: 1, integer truncation error 2, short integer overflow http://www.openwall.com/lists/oss-security/2010/08/11/4 http://securityevaluators.com/files/papers/CrashAnalysis.pdf http://www.openoffice.org/security/cves/CVE-2010-2935_CVE-2010-2936.html http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html https://bugzilla.redhat.com/show_bug.cgi?id=622529 oval:org.mitre.oval:def:12063 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12063 Common Vulnerability Exposure (CVE) ID: CVE-2010-2936 https://bugzilla.redhat.com/show_bug.cgi?id=622529#c6 https://bugzilla.redhat.com/show_bug.cgi?id=622555 oval:org.mitre.oval:def:12144 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12144 Common Vulnerability Exposure (CVE) ID: CVE-2010-3450 1025002 http://www.securitytracker.com/id?1025002 42999 http://secunia.com/advisories/42999 43065 http://secunia.com/advisories/43065 43118 http://secunia.com/advisories/43118 46031 http://www.securityfocus.com/bid/46031 70711 http://osvdb.org/70711 ADV-2011-0232 http://www.vupen.com/english/advisories/2011/0232 DSA-2151 http://www.debian.org/security/2011/dsa-2151 MDVSA-2011:027 http://www.mandriva.com/security/advisories?name=MDVSA-2011:027 RHSA-2011:0181 http://www.redhat.com/support/errata/RHSA-2011-0181.html RHSA-2011:0182 http://www.redhat.com/support/errata/RHSA-2011-0182.html http://www.openoffice.org/security/cves/CVE-2010-3450.html http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html https://bugzilla.redhat.com/show_bug.cgi?id=602324 Common Vulnerability Exposure (CVE) ID: CVE-2010-3451 70712 http://osvdb.org/70712 http://www.cs.brown.edu/people/drosenbe/research.html http://www.openoffice.org/security/cves/CVE-2010-3451_CVE-2010-3452.html http://www.vsecurity.com/resources/advisory/20110126-1 https://bugzilla.redhat.com/show_bug.cgi?id=641282 ooo-rtf-ce(65030) https://exchange.xforce.ibmcloud.com/vulnerabilities/65030 Common Vulnerability Exposure (CVE) ID: CVE-2010-3452 70713 http://osvdb.org/70713 https://bugzilla.redhat.com/show_bug.cgi?id=640241 ooo-oowriter-ce(65031) https://exchange.xforce.ibmcloud.com/vulnerabilities/65031 Common Vulnerability Exposure (CVE) ID: CVE-2010-3453 70714 http://osvdb.org/70714 http://www.openoffice.org/security/cves/CVE-2010-3453_CVE-2010-3454.html https://bugzilla.redhat.com/show_bug.cgi?id=640950 Common Vulnerability Exposure (CVE) ID: CVE-2010-3454 70715 http://osvdb.org/70715 https://bugzilla.redhat.com/show_bug.cgi?id=640954 Common Vulnerability Exposure (CVE) ID: CVE-2010-3689 1025004 http://www.securitytracker.com/id?1025004 70716 http://osvdb.org/70716 http://www.openoffice.org/security/cves/CVE-2010-3689.html https://bugzilla.redhat.com/show_bug.cgi?id=641224 Common Vulnerability Exposure (CVE) ID: CVE-2010-4253 70717 http://osvdb.org/70717 http://www.openoffice.org/security/cves/CVE-2010-4253.html https://bugzilla.redhat.com/show_bug.cgi?id=658259 Common Vulnerability Exposure (CVE) ID: CVE-2010-4643 70718 http://osvdb.org/70718 http://www.openoffice.org/security/cves/CVE-2010-4643.html https://bugzilla.redhat.com/show_bug.cgi?id=667588 ooo-tga-bo(65441) https://exchange.xforce.ibmcloud.com/vulnerabilities/65441 Common Vulnerability Exposure (CVE) ID: CVE-2011-2713 1026145 http://www.securitytracker.com/id?1026145 49969 http://www.securityfocus.com/bid/49969 50692 http://secunia.com/advisories/50692 76178 http://osvdb.org/76178 DSA-2315 http://www.debian.org/security/2011/dsa-2315 FEDORA-2011-14036 http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068160.html FEDORA-2011-14049 http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068198.html GLSA-201209-05 http://security.gentoo.org/glsa/glsa-201209-05.xml MDVSA-2011:172 http://www.mandriva.com/security/advisories?name=MDVSA-2011:172 http://www.libreoffice.org/advisories/CVE-2011-2713/ https://bugzilla.redhat.com/show_bug.cgi?id=725668 openSUSE-SU-2011:1143 http://lists.opensuse.org/opensuse-updates/2011-10/msg00019.html Common Vulnerability Exposure (CVE) ID: CVE-2012-0037 1026837 http://www.securitytracker.com/id?1026837 48479 http://secunia.com/advisories/48479 48493 http://secunia.com/advisories/48493 48494 http://secunia.com/advisories/48494 48526 http://secunia.com/advisories/48526 48529 http://secunia.com/advisories/48529 48542 http://secunia.com/advisories/48542 48649 http://secunia.com/advisories/48649 52681 http://www.securityfocus.com/bid/52681 80307 http://www.osvdb.org/80307 DSA-2438 http://www.debian.org/security/2012/dsa-2438 FEDORA-2012-4629 http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077708.html FEDORA-2012-4663 http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078242.html MDVSA-2012:061 http://www.mandriva.com/security/advisories?name=MDVSA-2012:061 MDVSA-2012:062 http://www.mandriva.com/security/advisories?name=MDVSA-2012:062 MDVSA-2012:063 http://www.mandriva.com/security/advisories?name=MDVSA-2012:063 RHSA-2012:0410 http://rhn.redhat.com/errata/RHSA-2012-0410.html RHSA-2012:0411 http://rhn.redhat.com/errata/RHSA-2012-0411.html [openoffice-commits] 20200305 svn commit: r1874832 - in /openoffice/ooo-site/trunk/content: download/checksums.html download/globalvars.js download/test/globalvars.js security/cves/CVE-2012-0037.html security/cves/CVE-2013-1571.html https://lists.apache.org/thread.html/re0504f08000df786e51795940501e81a5d0ae981ecca68141e87ece0%40%3Ccommits.openoffice.apache.org%3E [oss-security] 20120427 Fwd: CVE-2012-0037: libraptor - XXE in RDF/XML File Interpretation (Multiple office products affected) http://www.openwall.com/lists/oss-security/2012/03/27/4 http://blog.documentfoundation.org/2012/03/22/tdf-announces-libreoffice-3-4-6/ http://librdf.org/raptor/RELEASE.html#rel2_0_7 http://vsecurity.com/resources/advisory/20120324-1/ http://www.libreoffice.org/advisories/CVE-2012-0037/ http://www.openoffice.org/security/cves/CVE-2012-0037.html https://github.com/dajobe/raptor/commit/a676f235309a59d4aa78eeffd2574ae5d341fcb0 openoffice-xml-info-disclosure(74235) https://exchange.xforce.ibmcloud.com/vulnerabilities/74235 Common Vulnerability Exposure (CVE) ID: CVE-2012-1149 1027068 http://securitytracker.com/id?1027068 20120516 CVE-2012-1149 OpenOffice.org integer overflow error in vclmi.dll module when allocating memory for an embedded image object http://archives.neohapsis.com/archives/bugtraq/2012-05/0089.html 46992 http://secunia.com/advisories/46992 47244 http://secunia.com/advisories/47244 49140 http://secunia.com/advisories/49140 49373 http://secunia.com/advisories/49373 49392 http://secunia.com/advisories/49392 53570 http://www.securityfocus.com/bid/53570 81988 http://www.osvdb.org/81988 DSA-2473 http://www.debian.org/security/2012/dsa-2473 DSA-2487 http://www.debian.org/security/2012/dsa-2487 FEDORA-2012-8042 http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081319.html FEDORA-2012-8114 http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082168.html MDVSA-2012:090 http://www.mandriva.com/security/advisories?name=MDVSA-2012:090 MDVSA-2012:091 http://www.mandriva.com/security/advisories?name=MDVSA-2012:091 RHSA-2012:0705 http://rhn.redhat.com/errata/RHSA-2012-0705.html http://www.libreoffice.org/advisories/cve-2012-1149/ http://www.openoffice.org/security/cves/CVE-2012-1149.html openoffice-vclmi-bo(75692) https://exchange.xforce.ibmcloud.com/vulnerabilities/75692 Common Vulnerability Exposure (CVE) ID: CVE-2012-2149 1027069 http://www.securitytracker.com/id?1027069 20120516 CVE-2012-2149 OpenOffice.org memory overwrite vulnerability http://archives.neohapsis.com/archives/bugtraq/2012-05/0090.html RHSA-2012:1043 http://rhn.redhat.com/errata/RHSA-2012-1043.html http://packetstormsecurity.org/files/112862/libwpd-WPXContentListener-_closeTableRow-Memory-Overwrite.html http://www.openoffice.org/security/cves/CVE-2012-2149.html https://www.sec-consult.com/files/20120518-0_openoffice_memory_overwrite.txt Common Vulnerability Exposure (CVE) ID: CVE-2012-2334 1027070 http://securitytracker.com/id?1027070 20120516 CVE-2012-2334 Vulnerabilities related to malformed Powerpoint files in OpenOffice.org 3.3.0 http://archives.neohapsis.com/archives/bugtraq/2012-05/0091.html 82517 http://www.osvdb.org/82517 [oss-security] 20120528 Kind request to update upstream CVE-2012-2334 advisories they to reflect arbitrary code execution possibility too and OSS list notification http://www.openwall.com/lists/oss-security/2012/05/28/2 http://cgit.freedesktop.org/libreoffice/core/commit/?id=28a6558f9d3ca2dda3191f8b5b3f2378ee2533da http://cgit.freedesktop.org/libreoffice/core/commit/?id=512401decb286ba0fc3031939b8f7de8649c502e http://www.libreoffice.org/advisories/cve-2012-2334/ http://www.openoffice.org/security/cves/CVE-2012-2334.html https://bugzilla.redhat.com/show_bug.cgi?id=821803 openoffice-powerpoint-dos(75695) https://exchange.xforce.ibmcloud.com/vulnerabilities/75695 Common Vulnerability Exposure (CVE) ID: CVE-2012-2665 1027331 http://www.securitytracker.com/id?1027331 1027332 http://www.securitytracker.com/id?1027332 50142 http://secunia.com/advisories/50142 50146 http://secunia.com/advisories/50146 54769 http://www.securityfocus.com/bid/54769 DSA-2520 http://www.debian.org/security/2012/dsa-2520 RHSA-2012:1135 http://rhn.redhat.com/errata/RHSA-2012-1135.html USN-1536-1 http://www.ubuntu.com/usn/USN-1536-1 USN-1537-1 http://www.ubuntu.com/usn/USN-1537-1 http://www.libreoffice.org/about-us/security/advisories/cve-2012-2665/ http://www.pre-cert.de/advisories/PRE-SA-2012-05.txt https://bugzilla.redhat.com/show_bug.cgi?id=826077 Common Vulnerability Exposure (CVE) ID: CVE-2014-0247 57383 http://secunia.com/advisories/57383 59330 http://secunia.com/advisories/59330 68151 http://www.securityfocus.com/bid/68151 FEDORA-2014-7679 http://lists.fedoraproject.org/pipermail/package-announce/2014-July/135020.html RHSA-2015:0377 http://rhn.redhat.com/errata/RHSA-2015-0377.html USN-2253-1 http://www.ubuntu.com/usn/USN-2253-1 http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-0247.html https://bugs.mageia.org/show_bug.cgi?id=13580 https://gerrit.libreoffice.org/gitweb?p=core.git%3Ba=blobdiff%3Bf=sfx2/source/doc/docmacromode.cxx%3Bh=4d4ae52b4339582a039744d03671c1db0633d6c3%3Bhp=2108d1920f8148ff60fd4a57684f295d6d733e7b%3Bhb=1b0402f87c9b17fef2141130bfaa1798ece6ba0d%3Bhpb=4d2113250fa7ed62fe2c53ed0f76e3de5875cb81 https://www.libreoffice.org/about-us/security/advisories/cve-2014-0247/ openSUSE-SU-2014:0860 http://lists.opensuse.org/opensuse-updates/2014-07/msg00006.html
Copyright	Copyright (C) 2015 Eero Volotinen

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.