Test ID:	1.3.6.1.4.1.25623.1.0.58455
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 200707-02 (openoffice)
Summary:	The remote host is missing updates announced in;advisory GLSA 200707-02.
Description:	Summary: The remote host is missing updates announced in advisory GLSA 200707-02. Vulnerability Insight: Multiple vulnerabilities have been discovered in OpenOffice.org, allowing for the remote execution of arbitrary code. Solution: All OpenOffice.org users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=app-office/openoffice-2.2.1' All OpenOffice.org binary users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=app-office/openoffice-bin-2.2.1' CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-0245 BugTraq ID: 24450 http://www.securityfocus.com/bid/24450 Bugtraq: 20070613 High risk vulnerability in OpenOffice RTF parser (Google Search) http://www.securityfocus.com/archive/1/471274/100/0/threaded Debian Security Information: DSA-1307 (Google Search) http://www.debian.org/security/2007/dsa-1307 http://www.gentoo.org/security/en/glsa/glsa-200707-02.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:144 http://osvdb.org/35378 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10002 http://www.redhat.com/support/errata/RHSA-2007-0406.html http://www.securitytracker.com/id?1018239 http://secunia.com/advisories/25648 http://secunia.com/advisories/25650 http://secunia.com/advisories/25673 http://secunia.com/advisories/25705 http://secunia.com/advisories/25862 http://secunia.com/advisories/25894 http://secunia.com/advisories/25905 http://secunia.com/advisories/26010 http://secunia.com/advisories/26022 http://secunia.com/advisories/26476 SGI Security Advisory: 20070602-01-P ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc http://sunsolve.sun.com/search/document.do?assetkey=1-26-102917-1 SuSE Security Announcement: SUSE-SA:2007:037 (Google Search) http://www.novell.com/linux/security/advisories/2007_37_openoffice.html http://www.ubuntu.com/usn/usn-482-1 http://www.vupen.com/english/advisories/2007/2166 http://www.vupen.com/english/advisories/2007/2229 XForce ISS Database: openoffice-rtf-bo(34843) https://exchange.xforce.ibmcloud.com/vulnerabilities/34843 Common Vulnerability Exposure (CVE) ID: CVE-2007-2754 1018088 http://www.securitytracker.com/id?1018088 102967 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102967-1 103171 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103171-1 200033 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200033-1 2007-0019 http://www.trustix.org/errata/2007/0019/ 20070524 FLEA-2007-0020-1: freetype http://www.securityfocus.com/archive/1/469463/100/200/threaded 20070602-01-P 20070613 FLEA-2007-0025-1: openoffice.org http://www.securityfocus.com/archive/1/471286/30/6180/threaded 24074 http://www.securityfocus.com/bid/24074 25350 http://secunia.com/advisories/25350 25353 http://secunia.com/advisories/25353 25386 http://secunia.com/advisories/25386 25463 http://secunia.com/advisories/25463 25483 http://secunia.com/advisories/25483 25609 http://secunia.com/advisories/25609 25612 http://secunia.com/advisories/25612 25654 http://secunia.com/advisories/25654 25705 25808 http://secunia.com/advisories/25808 25894 25905 26129 http://secunia.com/advisories/26129 26305 http://secunia.com/advisories/26305 28298 http://secunia.com/advisories/28298 30161 http://secunia.com/advisories/30161 35074 http://secunia.com/advisories/35074 35200 http://secunia.com/advisories/35200 35204 http://secunia.com/advisories/35204 35233 http://secunia.com/advisories/35233 36509 http://osvdb.org/36509 ADV-2007-1894 http://www.vupen.com/english/advisories/2007/1894 ADV-2007-2229 ADV-2008-0049 http://www.vupen.com/english/advisories/2008/0049 ADV-2009-1297 http://www.vupen.com/english/advisories/2009/1297 APPLE-SA-2007-11-14 http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html APPLE-SA-2009-05-12 http://lists.apple.com/archives/security-announce/2009/May/msg00002.html DSA-1302 http://www.debian.org/security/2007/dsa-1302 DSA-1334 http://www.debian.org/security/2007/dsa-1334 FEDORA-2009-5558 https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01316.html FEDORA-2009-5644 https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01401.html GLSA-200705-22 http://www.gentoo.org/security/en/glsa/glsa-200705-22.xml GLSA-200707-02 GLSA-200805-07 http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml MDKSA-2007:121 http://www.mandriva.com/security/advisories?name=MDKSA-2007:121 OpenPKG-SA-2007.018 http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.018.html RHSA-2007:0403 http://www.redhat.com/support/errata/RHSA-2007-0403.html RHSA-2009:0329 http://www.redhat.com/support/errata/RHSA-2009-0329.html RHSA-2009:1062 http://www.redhat.com/support/errata/RHSA-2009-1062.html SUSE-SA:2007:041 http://www.novell.com/linux/security/advisories/2007_41_freetype2.html TA09-133A http://www.us-cert.gov/cas/techalerts/TA09-133A.html USN-466-1 http://www.ubuntu.com/usn/usn-466-1 [ft-devel] 20070427 Bug in fuzzed TTF file http://lists.gnu.org/archive/html/freetype-devel/2007-04/msg00041.html http://cvs.savannah.nongnu.org/viewvc/freetype2/src/truetype/ttgload.c?root=freetype&r1=1.177&r2=1.178 http://support.apple.com/kb/HT3549 http://support.avaya.com/elmodocs2/security/ASA-2007-330.htm https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=240200 https://bugzilla.redhat.com/show_bug.cgi?id=502565 https://issues.rpath.com/browse/RPL-1390 oval:org.mitre.oval:def:11325 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11325 oval:org.mitre.oval:def:5532 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5532
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.