Test ID:	1.3.6.1.4.1.25623.1.0.72565
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-2570-1)
Summary:	The remote host is missing an update for the Debian 'openoffice.org' package(s) announced via the DSA-2570-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'openoffice.org' package(s) announced via the DSA-2570-1 advisory. Vulnerability Insight: High-Tech Bridge SA Security Research Lab discovered multiple null-pointer dereferences based vulnerabilities in OpenOffice.org which could cause application crash or even arbitrary code execution using specially crafted files. Affected file types are LWP (Lotus Word Pro), ODG, PPT (PowerPoint 2003) and XLS (Excel 2003). For the stable distribution (squeeze), this problem has been fixed in version 1:3.2.1-11+squeeze8. openoffice.org package has been replaced by libreoffice in testing (wheezy) and unstable (sid) distributions. For the testing distribution (wheezy), this problem has been fixed in version 1:3.5.4+dfsg-3. For the unstable distribution (sid), this problem has been fixed in version 1:3.5.4+dfsg-3. We recommend that you upgrade your openoffice.org packages. Affected Software/OS: 'openoffice.org' package(s) on Debian 6. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4233 BugTraq ID: 56352 http://www.securityfocus.com/bid/56352 Debian Security Information: DSA-2570 (Google Search) http://www.debian.org/security/2012/dsa-2570 https://www.htbridge.com/advisory/HTB23106 http://www.openwall.com/lists/oss-security/2012/11/02/2 SuSE Security Announcement: openSUSE-SU-2012:1523 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-11/msg00039.html SuSE Security Announcement: openSUSE-SU-2012:1686 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-12/msg00075.html XForce ISS Database: libreoffice-odt-dos(79728) https://exchange.xforce.ibmcloud.com/vulnerabilities/79728 XForce ISS Database: libreoffice-ppt-file-dos(79731) https://exchange.xforce.ibmcloud.com/vulnerabilities/79731 XForce ISS Database: libreoffice-svxcorelo-dos(79730) https://exchange.xforce.ibmcloud.com/vulnerabilities/79730 XForce ISS Database: libreoffice-xls-dos(79732) https://exchange.xforce.ibmcloud.com/vulnerabilities/79732
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.