Test ID:	1.3.6.1.4.1.25623.1.0.61768
Category:	Fedora Local Security Checks
Title:	Fedora Core 8 FEDORA-2008-9333 (openoffice.org)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to openoffice.org announced via advisory FEDORA-2008-9333. Update Information: A security release to address: - CVE-2008-2237: Manipulated WMF files - CVE-2008-2238: Manipulated EMF files as described at http://www.openoffice.org/security/bulletin.html ChangeLog: * Wed Oct 29 2008 Caolan McNamara - 1:2.3.0-6.17 - CVE-2008-2237: Manipulated WMF files - CVE-2008-2238: Manipulated EMF files * Wed Aug 27 2008 Caolan McNamara - 1:2.3.0-6.16 - Resolves: CVE-2008-3282 numeric truncation error in OOo memory allocator References: [ 1 ] Bug #462639 - CVE-2008-2237 OpenOffice.org WMF integer overflow https://bugzilla.redhat.com/show_bug.cgi?id=462639 [ 2 ] Bug #466528 - CVE-2008-2238 OpenOffice.org multiple EMF buffer overflows https://bugzilla.redhat.com/show_bug.cgi?id=466528 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update openoffice.org' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2008-9333 Risk factor : Critical CVSS Score: 9.3
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-2237 BugTraq ID: 31962 http://www.securityfocus.com/bid/31962 Debian Security Information: DSA-1661 (Google Search) http://www.debian.org/security/2008/dsa-1661 https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00905.html https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00923.html http://security.gentoo.org/glsa/glsa-200812-13.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10784 http://www.redhat.com/support/errata/RHSA-2008-0939.html http://www.securitytracker.com/id?1021120 http://secunia.com/advisories/32419 http://secunia.com/advisories/32461 http://secunia.com/advisories/32463 http://secunia.com/advisories/32489 http://secunia.com/advisories/32676 http://secunia.com/advisories/32856 http://secunia.com/advisories/32872 http://secunia.com/advisories/33140 http://sunsolve.sun.com/search/document.do?assetkey=1-26-242627-1 SuSE Security Announcement: SUSE-SR:2008:026 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html http://www.ubuntu.com/usn/usn-677-1 http://www.ubuntu.com/usn/usn-677-2 http://www.vupen.com/english/advisories/2008/2947 http://www.vupen.com/english/advisories/2008/3103 XForce ISS Database: openoffice-wmf-bo(46165) https://exchange.xforce.ibmcloud.com/vulnerabilities/46165 Common Vulnerability Exposure (CVE) ID: CVE-2008-2238 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=750 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10849 http://www.securitytracker.com/id?1021121 http://sunsolve.sun.com/search/document.do?assetkey=1-26-243226-1 http://www.vupen.com/english/advisories/2008/3153 XForce ISS Database: openoffice-emf-file-bo(46166) https://exchange.xforce.ibmcloud.com/vulnerabilities/46166 Common Vulnerability Exposure (CVE) ID: CVE-2008-3282 1020764 http://securitytracker.com/id?1020764 30866 http://www.securityfocus.com/bid/30866 31640 http://secunia.com/advisories/31640 31646 http://secunia.com/advisories/31646 31778 http://secunia.com/advisories/31778 ADV-2008-2449 http://www.vupen.com/english/advisories/2008/2449 FEDORA-2008-7531 https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00494.html FEDORA-2008-7680 https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00120.html RHSA-2008:0835 http://www.redhat.com/support/errata/RHSA-2008-0835.html http://www.openoffice.org/issues/show_bug.cgi?id=92217 https://bugzilla.redhat.com/show_bug.cgi?id=455867 https://bugzilla.redhat.com/show_bug.cgi?id=458056 openoffice-rtlallocatememory-code-execution(44742) https://exchange.xforce.ibmcloud.com/vulnerabilities/44742 oval:org.mitre.oval:def:11345 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11345 Common Vulnerability Exposure (CVE) ID: CVE-2008-2152 BugTraq ID: 29622 http://www.securityfocus.com/bid/29622 https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00385.html https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00473.html https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00499.html http://security.gentoo.org/glsa/glsa-200807-05.xml http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=714 http://www.mandriva.com/security/advisories?name=MDVSA-2008:137 http://www.mandriva.com/security/advisories?name=MDVSA-2008:138 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9787 http://www.redhat.com/support/errata/RHSA-2008-0537.html http://www.redhat.com/support/errata/RHSA-2008-0538.html http://www.securitytracker.com/id?1020219 http://secunia.com/advisories/30599 http://secunia.com/advisories/30633 http://secunia.com/advisories/30634 http://secunia.com/advisories/30635 http://secunia.com/advisories/31029 http://sunsolve.sun.com/search/document.do?assetkey=1-26-237944-1 http://www.vupen.com/english/advisories/2008/1773 http://www.vupen.com/english/advisories/2008/1804/references XForce ISS Database: openoffice-rtlallocatememory-bo(42957) https://exchange.xforce.ibmcloud.com/vulnerabilities/42957 Common Vulnerability Exposure (CVE) ID: CVE-2007-5745 BugTraq ID: 28819 http://www.securityfocus.com/bid/28819 Debian Security Information: DSA-1547 (Google Search) http://www.debian.org/security/2008/dsa-1547 https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00448.html http://security.gentoo.org/glsa/glsa-200805-16.xml http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=691 http://www.mandriva.com/security/advisories?name=MDVSA-2008:095 https://bugzilla.redhat.com/show_bug.cgi?id=435678 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11006 http://www.redhat.com/support/errata/RHSA-2008-0175.html http://www.securitytracker.com/id?1019891 http://secunia.com/advisories/29852 http://secunia.com/advisories/29864 http://secunia.com/advisories/29871 http://secunia.com/advisories/29910 http://secunia.com/advisories/29913 http://secunia.com/advisories/29987 http://secunia.com/advisories/30100 http://secunia.com/advisories/30179 http://sunsolve.sun.com/search/document.do?assetkey=1-26-231601-1 SuSE Security Announcement: SUSE-SA:2008:023 (Google Search) http://www.novell.com/linux/security/advisories/2008_23_openoffice.html http://www.ubuntu.com/usn/usn-609-1 http://www.vupen.com/english/advisories/2008/1253/references http://www.vupen.com/english/advisories/2008/1375/references XForce ISS Database: openoffice-quattropro-bo(41863) https://exchange.xforce.ibmcloud.com/vulnerabilities/41863 Common Vulnerability Exposure (CVE) ID: CVE-2007-5746 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=692 http://www.mandriva.com/security/advisories?name=MDVSA-2008:090 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10249 http://www.redhat.com/support/errata/RHSA-2008-0176.html http://www.securitytracker.com/id?1019892 http://secunia.com/advisories/29844 http://sunsolve.sun.com/search/document.do?assetkey=1-66-231661-1 XForce ISS Database: openoffice-emf-bo(41861) https://exchange.xforce.ibmcloud.com/vulnerabilities/41861 Common Vulnerability Exposure (CVE) ID: CVE-2007-5747 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=693 https://bugzilla.redhat.com/show_bug.cgi?id=435681 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11298 XForce ISS Database: openoffice-quattropro-code-execution(41881) https://exchange.xforce.ibmcloud.com/vulnerabilities/41881 Common Vulnerability Exposure (CVE) ID: CVE-2008-0320 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=694 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10318 http://www.securitytracker.com/id?1019890 http://sunsolve.sun.com/search/document.do?assetkey=1-26-231642-1 XForce ISS Database: openoffice-ole-bo(41860) https://exchange.xforce.ibmcloud.com/vulnerabilities/41860 Common Vulnerability Exposure (CVE) ID: CVE-2007-4575 1019041 http://www.securitytracker.com/id?1019041 103141 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103141-1 200637 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200637-1 26703 http://www.securityfocus.com/bid/26703 27914 http://secunia.com/advisories/27914 27916 http://secunia.com/advisories/27916 27928 http://secunia.com/advisories/27928 27931 http://secunia.com/advisories/27931 27972 http://secunia.com/advisories/27972 28018 http://secunia.com/advisories/28018 28039 http://secunia.com/advisories/28039 28286 http://secunia.com/advisories/28286 28585 http://secunia.com/advisories/28585 30100 ADV-2007-4092 http://www.vupen.com/english/advisories/2007/4092 ADV-2007-4146 http://www.vupen.com/english/advisories/2007/4146 DSA-1419 http://www.debian.org/security/2007/dsa-1419 FEDORA-2007-4119 https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00753.html FEDORA-2007-4120 http://www.redhat.com/archives/fedora-package-announce/2007-December/msg00134.html FEDORA-2007-4171 https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00678.html FEDORA-2007-4172 http://www.redhat.com/archives/fedora-package-announce/2007-December/msg00155.html FEDORA-2007-762 http://www.redhat.com/archives/fedora-package-announce/2007-December/msg00281.html GLSA-200712-25 http://www.gentoo.org/security/en/glsa/glsa-200712-25.xml MDVSA-2008:095 RHSA-2007:1048 http://www.redhat.com/support/errata/RHSA-2007-1048.html RHSA-2007:1090 http://www.redhat.com/support/errata/RHSA-2007-1090.html RHSA-2008:0151 http://www.redhat.com/support/errata/RHSA-2008-0151.html RHSA-2008:0158 http://www.redhat.com/support/errata/RHSA-2008-0158.html RHSA-2008:0213 http://www.redhat.com/support/errata/RHSA-2008-0213.html SUSE-SA:2007:067 http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00005.html USN-609-1 http://bugs.gentoo.org/show_bug.cgi?id=200771 http://bugs.gentoo.org/show_bug.cgi?id=201799 http://www.openoffice.org/security/cves/CVE-2007-4575.html openoffice-hsqldb-code-execution(38882) https://exchange.xforce.ibmcloud.com/vulnerabilities/38882 oval:org.mitre.oval:def:10153 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10153
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.