Bugzilla Bug 244995

From Secunia:

CRITICAL:
Highly critical

IMPACT:
System access

WHERE:
From remote

SOFTWARE:
OpenOffice.org 2.x
http://secunia.com/advisories/product/6157/

DESCRIPTION:
Some vulnerabilities have been reported in OpenOffice, which
potentially can be exploited by malicious people to compromise a
user's system.

1) An error in the processing of WMF files can be exploited to cause
a heap-based buffer overflow via a specially crafted
StarOffice/StarSuite document.

2) An error in the processing of EMF files can be exploited to cause
a heap-based buffer overflow via a specially crafted
StarOffice/StarSuite document.

Successful exploitation of the vulnerabilities may allow execution of
arbitrary code.

The vulnerabilities are reported in 2.x versions prior to 2.4.2.

SOLUTION:
Update to version 2.4.2.

PROVIDED AND/OR DISCOVERED BY:
The vendor credits:
1) an anonymous researcher working with the SureRun Security Team
2) an anonymous researcher working with iDefense

ORIGINAL ADVISORY:
http://www.openoffice.org/security/cves/CVE-2008-2237.html
http://www.openoffice.org/security/cves/CVE-2008-2238.html

This bug just adds more urgency to bug #235824

(In reply to comment #1)
> This bug just adds more urgency to bug #235824
> 

Totally agree, 3.0 should be the way to go, not 2.4.2.

There's no need to CC arches to two bugs. If this bug gets it stable fix by the
other bug, we can just set dependings and mark it blocked in whiteboard.

CVE-2008-2237 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2237):
  Heap-based buffer overflow in OpenOffice.org (OOo) 2.x before 2.4.2
  allows remote attackers to execute arbitrary code via a crafted WMF
  file associated with a StarOffice/StarSuite document.

CVE-2008-2238 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2238):
  Heap-based buffer overflow in OpenOffice.org (OOo) 2.x before 2.4.2
  allows remote attackers to execute arbitrary code via a crafted EMF
  file associated with a StarOffice/StarSuite document.

GLSA 200812-13