| Description: | Description:
The remote host is missing an update to OpenOffice.org
announced via advisory MDKSA-2006:118.
OpenOffice.org 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-complicit
attackers to conduct unauthorized activities via an OpenOffice document with
a malicious BASIC macro, which is executed without prompting the user.
(CVE-2006-2198)
An unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x up to
1.1.5 and 2.0.x before 2.0.3 allows user-complicit attackers to escape the
Java sandbox and conduct unauthorized activities via certain applets in
OpenOffice documents. (CVE-2006-2199)
Heap-based buffer overflow in OpenOffice.org 1.1.x up to 1.1.5 and 2.0.x
before 2.0.3 allows user-complicit attackers to execute arbitrary code via a
crafted OpenOffice XML document that is not properly handled by (1) Calc,
(2) Draw, (3) Impress, (4) Math, or (5) Writer, aka File Format / Buffer
Overflow Vulnerability. (CVE-2006-3117)
Updated packages are patched to address this issue.
Affected: 2006.0, Corporate 3.0
Solution:
To upgrade automatically use MandrakeUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2006:118
Risk factor : High
CVSS Score:
7.6
|
