From Secunia: CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: OpenOffice.org 2.x http://secunia.com/advisories/product/6157/ DESCRIPTION: Some vulnerabilities have been reported in OpenOffice, which potentially can be exploited by malicious people to compromise a user's system. 1) An error in the processing of WMF files can be exploited to cause a heap-based buffer overflow via a specially crafted StarOffice/StarSuite document. 2) An error in the processing of EMF files can be exploited to cause a heap-based buffer overflow via a specially crafted StarOffice/StarSuite document. Successful exploitation of the vulnerabilities may allow execution of arbitrary code. The vulnerabilities are reported in 2.x versions prior to 2.4.2. SOLUTION: Update to version 2.4.2. PROVIDED AND/OR DISCOVERED BY: The vendor credits: 1) an anonymous researcher working with the SureRun Security Team 2) an anonymous researcher working with iDefense ORIGINAL ADVISORY: http://www.openoffice.org/security/cves/CVE-2008-2237.html http://www.openoffice.org/security/cves/CVE-2008-2238.html
This bug just adds more urgency to bug #235824
(In reply to comment #1) > This bug just adds more urgency to bug #235824 > Totally agree, 3.0 should be the way to go, not 2.4.2.
There's no need to CC arches to two bugs. If this bug gets it stable fix by the other bug, we can just set dependings and mark it blocked in whiteboard.
CVE-2008-2237 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2237): Heap-based buffer overflow in OpenOffice.org (OOo) 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted WMF file associated with a StarOffice/StarSuite document. CVE-2008-2238 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2238): Heap-based buffer overflow in OpenOffice.org (OOo) 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted EMF file associated with a StarOffice/StarSuite document.
GLSA 200812-13
