exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Mandriva Linux Security Advisory 2008-138

Mandriva Linux Security Advisory 2008-138
Posted Jul 15, 2008
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory - Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in OpenOffice.org (OOo) 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow. The updated packages have been patched to fix the issue. The OpenOffice.org package for Mandriva Corporate 3 missed the patch application due to a build error. This update fixes that.

tags | advisory, remote, overflow, arbitrary
systems | linux, mandriva
advisories | CVE-2008-2152
SHA-256 | cba8ef6fe369d68f51876e63cd4e84efabd1b52022f827bc2ffa123464041e03

Mandriva Linux Security Advisory 2008-138

Change Mirror Download

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2008:138-1
http://www.mandriva.com/security/
_______________________________________________________________________

Package : openoffice.org
Date : July 11, 2008
Affected: Corporate 3.0
_______________________________________________________________________

Problem Description:

Integer overflow in the rtl_allocateMemory function in
sal/rtl/source/alloc_global.c in OpenOffice.org (OOo) 2.0 through 2.4
allows remote attackers to execute arbitrary code via a crafted file
that triggers a heap-based buffer overflow.

The updated packages have been patched to fix the issue.

Update:

The OpenOffice.org package for Mandriva Corporate 3 missed the patch
application due to a build error. This update fixes that.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2152
_______________________________________________________________________

Updated Packages:

Corporate 3.0:
deb62c6ac38652e0f1cd107a9e36061f corporate/3.0/i586/OpenOffice.org-1.1.2-9.10.C30mdk.i586.rpm
68b1c68929274570f63b2ef480273565 corporate/3.0/i586/OpenOffice.org-help-cs-1.1.2-9.10.C30mdk.i586.rpm
5d9e047daeca2eee1ceb03dff3f0717f corporate/3.0/i586/OpenOffice.org-help-de-1.1.2-9.10.C30mdk.i586.rpm
6a18c0c6aef45ea21d3ebdaa4a1a0c89 corporate/3.0/i586/OpenOffice.org-help-en-1.1.2-9.10.C30mdk.i586.rpm
26ed68798115b3d660cb6d31170c7863 corporate/3.0/i586/OpenOffice.org-help-es-1.1.2-9.10.C30mdk.i586.rpm
ce1d88b2be8e0d8e163ab76b54ca2be8 corporate/3.0/i586/OpenOffice.org-help-eu-1.1.2-9.10.C30mdk.i586.rpm
e5d6e7c7b1238d2c86626769a004b178 corporate/3.0/i586/OpenOffice.org-help-fi-1.1.2-9.10.C30mdk.i586.rpm
77528eb1bea2608eb6a7d6c8cf4028d2 corporate/3.0/i586/OpenOffice.org-help-fr-1.1.2-9.10.C30mdk.i586.rpm
dc5329a92519af7cdeaf8cd3eb17debe corporate/3.0/i586/OpenOffice.org-help-it-1.1.2-9.10.C30mdk.i586.rpm
01eeb6d31c609092351a0c84a1bd9681 corporate/3.0/i586/OpenOffice.org-help-ja-1.1.2-9.10.C30mdk.i586.rpm
f2163e9c6a7a16946159f04ec1b46880 corporate/3.0/i586/OpenOffice.org-help-ko-1.1.2-9.10.C30mdk.i586.rpm
f9e9f8a809ba9039239f986f52471873 corporate/3.0/i586/OpenOffice.org-help-nl-1.1.2-9.10.C30mdk.i586.rpm
8d52a0982c03a3618e4a15adf18097d8 corporate/3.0/i586/OpenOffice.org-help-ru-1.1.2-9.10.C30mdk.i586.rpm
b8b1f9084d1668a14e33e24e1d2747cd corporate/3.0/i586/OpenOffice.org-help-sk-1.1.2-9.10.C30mdk.i586.rpm
be5652146876e8e7093d589a46da9e4c corporate/3.0/i586/OpenOffice.org-help-sv-1.1.2-9.10.C30mdk.i586.rpm
d0747af0472c4c72cccff2bde1f7370d corporate/3.0/i586/OpenOffice.org-help-zh_CN-1.1.2-9.10.C30mdk.i586.rpm
d3986111638cf20bfc69e04c59de5dc1 corporate/3.0/i586/OpenOffice.org-help-zh_TW-1.1.2-9.10.C30mdk.i586.rpm
313d425bc3d51e20b13cded8438daab5 corporate/3.0/i586/OpenOffice.org-l10n-ar-1.1.2-9.10.C30mdk.i586.rpm
e240d5d7d0a3141cb8c8a069ff162922 corporate/3.0/i586/OpenOffice.org-l10n-ca-1.1.2-9.10.C30mdk.i586.rpm
b0e4d37ab97342a21c044a77fbd66220 corporate/3.0/i586/OpenOffice.org-l10n-cs-1.1.2-9.10.C30mdk.i586.rpm
78c7da7f08dd7123b38cc624fb10e6ee corporate/3.0/i586/OpenOffice.org-l10n-da-1.1.2-9.10.C30mdk.i586.rpm
9d1621a7ff292437de85cd0fb865d076 corporate/3.0/i586/OpenOffice.org-l10n-de-1.1.2-9.10.C30mdk.i586.rpm
e1522a9b956f78efc75327d927d74640 corporate/3.0/i586/OpenOffice.org-l10n-el-1.1.2-9.10.C30mdk.i586.rpm
b1fccdd50ec8ead7aaf1935ceadb2ece corporate/3.0/i586/OpenOffice.org-l10n-en-1.1.2-9.10.C30mdk.i586.rpm
1b7a41f8613d9866477e290db5e7725c corporate/3.0/i586/OpenOffice.org-l10n-es-1.1.2-9.10.C30mdk.i586.rpm
7755784029d99751f363a3d8c8d438bd corporate/3.0/i586/OpenOffice.org-l10n-et-1.1.2-9.10.C30mdk.i586.rpm
70ebedc05e22f215d6ac6b1fb9856883 corporate/3.0/i586/OpenOffice.org-l10n-eu-1.1.2-9.10.C30mdk.i586.rpm
50fda3b2ecad139bd21874bbc37ac315 corporate/3.0/i586/OpenOffice.org-l10n-fi-1.1.2-9.10.C30mdk.i586.rpm
03e31730f5df58afac498e0987bdef59 corporate/3.0/i586/OpenOffice.org-l10n-fr-1.1.2-9.10.C30mdk.i586.rpm
b26e706a2d83ed7ddd94846fe9b8df5f corporate/3.0/i586/OpenOffice.org-l10n-it-1.1.2-9.10.C30mdk.i586.rpm
9484e29fa751546dc67dc62e02e5b542 corporate/3.0/i586/OpenOffice.org-l10n-ja-1.1.2-9.10.C30mdk.i586.rpm
4bc8c3ac08b9484895db7451142c9d42 corporate/3.0/i586/OpenOffice.org-l10n-ko-1.1.2-9.10.C30mdk.i586.rpm
1e7e25c63546c11d534888588f3e4ba1 corporate/3.0/i586/OpenOffice.org-l10n-nb-1.1.2-9.10.C30mdk.i586.rpm
9b026f920eb5d6c6259ef85a02337c21 corporate/3.0/i586/OpenOffice.org-l10n-nl-1.1.2-9.10.C30mdk.i586.rpm
46f7f043556cc93b19f67e668e4bba6a corporate/3.0/i586/OpenOffice.org-l10n-nn-1.1.2-9.10.C30mdk.i586.rpm
f69af85925a903562e4d0b72f453a33b corporate/3.0/i586/OpenOffice.org-l10n-pl-1.1.2-9.10.C30mdk.i586.rpm
97fe4423391ddbbe17d93ab89ecb2067 corporate/3.0/i586/OpenOffice.org-l10n-pt-1.1.2-9.10.C30mdk.i586.rpm
5143ba17237cf4c899bf5d99c0fb8ec2 corporate/3.0/i586/OpenOffice.org-l10n-pt_BR-1.1.2-9.10.C30mdk.i586.rpm
f6683bc3fd8f5f34c00cdf5c54605c65 corporate/3.0/i586/OpenOffice.org-l10n-ru-1.1.2-9.10.C30mdk.i586.rpm
52061bdd8c76214eeea74778dc0052c3 corporate/3.0/i586/OpenOffice.org-l10n-sk-1.1.2-9.10.C30mdk.i586.rpm
b9316b1409c1812feb3c531e270f11e6 corporate/3.0/i586/OpenOffice.org-l10n-sv-1.1.2-9.10.C30mdk.i586.rpm
4bf141937f8b9ed8e6db9bbefd5ed6bf corporate/3.0/i586/OpenOffice.org-l10n-tr-1.1.2-9.10.C30mdk.i586.rpm
a812dfe9ababa84817409c1410861111 corporate/3.0/i586/OpenOffice.org-l10n-zh_CN-1.1.2-9.10.C30mdk.i586.rpm
1af2f229debe28c47bec8480ccc6af08 corporate/3.0/i586/OpenOffice.org-l10n-zh_TW-1.1.2-9.10.C30mdk.i586.rpm
af581eca2bbb327d370838663d45b47e corporate/3.0/i586/OpenOffice.org-libs-1.1.2-9.10.C30mdk.i586.rpm
a0c76e124f956e44313d2060d3f36d99 corporate/3.0/SRPMS/OpenOffice.org-1.1.2-9.10.C30mdk.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFId80omqjQ0CJFipgRAnncAJ9DqNJG0iOnTfg7cpyhxcGui/fNSACfbprV
MIeRSERMiJgqAnQmqlmsl+w=
=xj+n
-----END PGP SIGNATURE-----
Login or Register to add favorites

File Archive:

October 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Oct 1st
    39 Files
  • 2
    Oct 2nd
    23 Files
  • 3
    Oct 3rd
    18 Files
  • 4
    Oct 4th
    20 Files
  • 5
    Oct 5th
    0 Files
  • 6
    Oct 6th
    0 Files
  • 7
    Oct 7th
    17 Files
  • 8
    Oct 8th
    66 Files
  • 9
    Oct 9th
    25 Files
  • 10
    Oct 10th
    20 Files
  • 11
    Oct 11th
    21 Files
  • 12
    Oct 12th
    0 Files
  • 13
    Oct 13th
    0 Files
  • 14
    Oct 14th
    14 Files
  • 15
    Oct 15th
    0 Files
  • 16
    Oct 16th
    0 Files
  • 17
    Oct 17th
    0 Files
  • 18
    Oct 18th
    0 Files
  • 19
    Oct 19th
    0 Files
  • 20
    Oct 20th
    0 Files
  • 21
    Oct 21st
    0 Files
  • 22
    Oct 22nd
    0 Files
  • 23
    Oct 23rd
    0 Files
  • 24
    Oct 24th
    0 Files
  • 25
    Oct 25th
    0 Files
  • 26
    Oct 26th
    0 Files
  • 27
    Oct 27th
    0 Files
  • 28
    Oct 28th
    0 Files
  • 29
    Oct 29th
    0 Files
  • 30
    Oct 30th
    0 Files
  • 31
    Oct 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2024 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close