160029 – app-office/openoffice Multiple integer overflows

Bug 160029 - app-office/openoffice Multiple integer overflows

Summary: app-office/openoffice Multiple integer overflows

Status:	RESOLVED DUPLICATE of bug 159951

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Other

Importance:	High normal (vote)
Assignee:	Gentoo Security

URL:	http://secunia.com/advisories/23612/
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2007-01-04 10:30 UTC by Executioner
Modified:	2007-01-04 11:16 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Executioner 2007-01-04 10:30:06 UTC

A vulnerability has been reported in OpenOffice, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to integer overflows within the processor for WMF/EMF files. This can be exploited to cause a heap-based buffer overflow by e.g. tricking a user into opening a specially crafted WMF/EMF file.

Successful exploitation may allow the execution of arbitrary code.

Comment 1 Raphael Marichez (Falco) (RETIRED) gentoo-dev

2007-01-04 11:16:38 UTC

Thanks, but an easy bugzie search would have instantaneously shown bug 159951.

*** This bug has been marked as a duplicate of 159951 ***