-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2008:095 http://www.mandriva.com/security/ _______________________________________________________________________ Package : openoffice.org Date : May 2, 2008 Affected: 2008.0 _______________________________________________________________________ Problem Description: A vulnerability in HSQLDB before 1.8.0.9 in OpenOffice.org could allow user-assisted remote attackers to execute arbitrary Java code via crafted database documents (CVE-2007-4575). A heap overflow was discovered in OpenOffice.org's EMF parser. An attacker could create a carefully crafted EMF file that could cause OpenOffice.org to crash or potentially execute arbitrary code if the malicious EMF image was added to a document or if a document containing such an EMF file was opened (CVE-2007-5746). Multiple heap overflows and an integer underflow were discovered in the Quattro Pro(R) import filter. An attacker could create a carefully crafted Quattro Pro file that could cause OpenOffice.org ro crash or potentially execute arbitraty code (CVE-2007-5745, CVE-2007-5747). A heap overflow was discovered in the OLE Structured Storage file parser, a format used by Microsoft Office documents. An attacker could create a carefully crafted OLE file that could cause OpenOffice.org to crash or potentially execute arbitrary code (CVE-2008-0320). The updated packages have been patched to correct these issues. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4575 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5745 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5746 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5747 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0320 _______________________________________________________________________ Updated Packages: Mandriva Linux 2008.0: 72798954ff44449ad9203fdce7130a62 2008.0/i586/openoffice.org-2.2.1-4.4mdv2008.0.i586.rpm 6a537faa29607ffef0a6544f5501a393 2008.0/i586/openoffice.org-devel-2.2.1-4.4mdv2008.0.i586.rpm 882be28f508c5b922378aafa6be1113b 2008.0/i586/openoffice.org-devel-doc-2.2.1-4.4mdv2008.0.i586.rpm d2cb90d3441f95836643e75012bf95d1 2008.0/i586/openoffice.org-galleries-2.2.1-4.4mdv2008.0.i586.rpm d0742126a62fcc7251458eebaeabd4fb 2008.0/i586/openoffice.org-gnome-2.2.1-4.4mdv2008.0.i586.rpm 0e6c20146f75d8922c679db7b06bd4be 2008.0/i586/openoffice.org-kde-2.2.1-4.4mdv2008.0.i586.rpm e1161013ec13e2e3138d578539cb5f37 2008.0/i586/openoffice.org-l10n-af-2.2.1-4.4mdv2008.0.i586.rpm b3663ed4b3c533d0e9188540acb9d6ea 2008.0/i586/openoffice.org-l10n-ar-2.2.1-4.4mdv2008.0.i586.rpm 00d753cc4308935b4a704d08385dfe21 2008.0/i586/openoffice.org-l10n-bg-2.2.1-4.4mdv2008.0.i586.rpm ce6c8bc0b6b63574d6e50d2a63b5c670 2008.0/i586/openoffice.org-l10n-br-2.2.1-4.4mdv2008.0.i586.rpm 572f6fde12b683e7ec47a2d3e49493fc 2008.0/i586/openoffice.org-l10n-bs-2.2.1-4.4mdv2008.0.i586.rpm 055e27ae44d8dc7a4322d835da7da993 2008.0/i586/openoffice.org-l10n-ca-2.2.1-4.4mdv2008.0.i586.rpm 97b37e8e03bec178607d71d0d58b14d6 2008.0/i586/openoffice.org-l10n-cs-2.2.1-4.4mdv2008.0.i586.rpm 8975fed89790697fc1d791ee040c1193 2008.0/i586/openoffice.org-l10n-cy-2.2.1-4.4mdv2008.0.i586.rpm 22b0b401e8c1dd731a455f9fbc7c7dbe 2008.0/i586/openoffice.org-l10n-da-2.2.1-4.4mdv2008.0.i586.rpm ed1a1f10985d483cb32f17e5c1d9e2d5 2008.0/i586/openoffice.org-l10n-de-2.2.1-4.4mdv2008.0.i586.rpm 95888fffe3dfd1d4e81863016c98fdd4 2008.0/i586/openoffice.org-l10n-el-2.2.1-4.4mdv2008.0.i586.rpm ddff2b506a75655ba1a864cc308bdb74 2008.0/i586/openoffice.org-l10n-en_GB-2.2.1-4.4mdv2008.0.i586.rpm 647ff67a9e986c56b858784ac409f628 2008.0/i586/openoffice.org-l10n-es-2.2.1-4.4mdv2008.0.i586.rpm 2e9730e46b79e6b5cc00ec6241d72a40 2008.0/i586/openoffice.org-l10n-et-2.2.1-4.4mdv2008.0.i586.rpm 5ebf6059a75498d3c254b3a5c26102f7 2008.0/i586/openoffice.org-l10n-eu-2.2.1-4.4mdv2008.0.i586.rpm 51770048207446d31c2560439f1f1c96 2008.0/i586/openoffice.org-l10n-fi-2.2.1-4.4mdv2008.0.i586.rpm 497785ba862bcc7ccf58e86d9339839c 2008.0/i586/openoffice.org-l10n-fr-2.2.1-4.4mdv2008.0.i586.rpm a9cd13bc39e594e2e0b328a494a05e59 2008.0/i586/openoffice.org-l10n-he-2.2.1-4.4mdv2008.0.i586.rpm acaab185b3eeedd24ade68134e0bae3a 2008.0/i586/openoffice.org-l10n-hi-2.2.1-4.4mdv2008.0.i586.rpm 416d29a882ee24fb51e37ca233650f92 2008.0/i586/openoffice.org-l10n-hu-2.2.1-4.4mdv2008.0.i586.rpm 51ee97ed40d9e3bd425e66e4643c213b 2008.0/i586/openoffice.org-l10n-it-2.2.1-4.4mdv2008.0.i586.rpm 2eec359c15bb910226c01d0c75b303cf 2008.0/i586/openoffice.org-l10n-ja-2.2.1-4.4mdv2008.0.i586.rpm 96661d4b321482c4059fd1ec0a7a3406 2008.0/i586/openoffice.org-l10n-ko-2.2.1-4.4mdv2008.0.i586.rpm b5c56e228e7f6d50f607ed2133eafdfc 2008.0/i586/openoffice.org-l10n-mk-2.2.1-4.4mdv2008.0.i586.rpm 4148b2d03b06f9e3424d7e72e6ba64a7 2008.0/i586/openoffice.org-l10n-nb-2.2.1-4.4mdv2008.0.i586.rpm b748239254d900e79161a0b8351deb75 2008.0/i586/openoffice.org-l10n-nl-2.2.1-4.4mdv2008.0.i586.rpm b9242bbea24034e0d8883fdd4ac417fe 2008.0/i586/openoffice.org-l10n-nn-2.2.1-4.4mdv2008.0.i586.rpm a9a83327869b06b85263aac4f2ce8944 2008.0/i586/openoffice.org-l10n-pl-2.2.1-4.4mdv2008.0.i586.rpm d754b3ae052cac6a9f6bd4f9f8a61cf5 2008.0/i586/openoffice.org-l10n-pt-2.2.1-4.4mdv2008.0.i586.rpm 51e3242d755dbdecb783b8c1a608d380 2008.0/i586/openoffice.org-l10n-pt_BR-2.2.1-4.4mdv2008.0.i586.rpm 2a766fb4ad705cc9815431c8f46228a3 2008.0/i586/openoffice.org-l10n-ru-2.2.1-4.4mdv2008.0.i586.rpm 4a5981bc0231b5a20bd56674c31386a8 2008.0/i586/openoffice.org-l10n-sk-2.2.1-4.4mdv2008.0.i586.rpm 06483e894447c9d6e4ca0c56bb98e4e8 2008.0/i586/openoffice.org-l10n-sl-2.2.1-4.4mdv2008.0.i586.rpm a7f4e2bcf881d7a295b8a6f6a601b598 2008.0/i586/openoffice.org-l10n-sv-2.2.1-4.4mdv2008.0.i586.rpm 0aee1180d9b1e91f36b47696765bfdcf 2008.0/i586/openoffice.org-l10n-ta-2.2.1-4.4mdv2008.0.i586.rpm 98d8d02bc3d6da0a780e6d6a09de3586 2008.0/i586/openoffice.org-l10n-tr-2.2.1-4.4mdv2008.0.i586.rpm ec82d080ba11a9bb0a4c92fd718c3ff4 2008.0/i586/openoffice.org-l10n-zh_CN-2.2.1-4.4mdv2008.0.i586.rpm b1294ebbc030c8b473d3f4cac1f0f9ad 2008.0/i586/openoffice.org-l10n-zh_TW-2.2.1-4.4mdv2008.0.i586.rpm 04420991685ad352ba76381058719d3b 2008.0/i586/openoffice.org-l10n-zu-2.2.1-4.4mdv2008.0.i586.rpm 9d7ccd1b59dd4396d4036be8145679d0 2008.0/i586/openoffice.org-mono-2.2.1-4.4mdv2008.0.i586.rpm 80590a32554d257c48b9ce42a76ea108 2008.0/i586/openoffice.org-ooqstart-2.2.1-4.4mdv2008.0.i586.rpm 1f77c6c9cfb6a0aed77a33e12cf8f1f6 2008.0/SRPMS/openoffice.org-2.2.1-4.4mdv2008.0.src.rpm 84c73385fdcb1d0a1bc2c077f744a20f 2008.0/SRPMS/openoffice.org64-2.2.1-4.4mdv2008.0.src.rpm Mandriva Linux 2008.0/X86_64: 456a8013fca659dea3938f469561ef0b 2008.0/x86_64/openoffice.org64-2.2.1-4.4mdv2008.0.x86_64.rpm c4374226d24bfc714acb6c3015d585f2 2008.0/x86_64/openoffice.org64-devel-2.2.1-4.4mdv2008.0.x86_64.rpm a963feb3099659d2e16298fa6ab93ba0 2008.0/x86_64/openoffice.org64-devel-doc-2.2.1-4.4mdv2008.0.x86_64.rpm fa6bd2c7af34ff151e2bdc5f1723a3af 2008.0/x86_64/openoffice.org64-galleries-2.2.1-4.4mdv2008.0.x86_64.rpm 44a3a7ee839a336e9b06d80d67785589 2008.0/x86_64/openoffice.org64-gnome-2.2.1-4.4mdv2008.0.x86_64.rpm 8df343f9cbccecbabcb12c8901fb1b82 2008.0/x86_64/openoffice.org64-kde-2.2.1-4.4mdv2008.0.x86_64.rpm 0b821aa43e0e78a2f99629b75211f8d9 2008.0/x86_64/openoffice.org64-l10n-af-2.2.1-4.4mdv2008.0.x86_64.rpm 8d5a1da2f98ed8eb54a77732c01cb1c1 2008.0/x86_64/openoffice.org64-l10n-ar-2.2.1-4.4mdv2008.0.x86_64.rpm 2f93835ea0677728552b6aaf8752fd98 2008.0/x86_64/openoffice.org64-l10n-bg-2.2.1-4.4mdv2008.0.x86_64.rpm 68cecc3d640bd1605b51e125e83b0842 2008.0/x86_64/openoffice.org64-l10n-br-2.2.1-4.4mdv2008.0.x86_64.rpm e89b07e667940059458c45822269297f 2008.0/x86_64/openoffice.org64-l10n-bs-2.2.1-4.4mdv2008.0.x86_64.rpm d40fc83e01482ac9eca8802ee21533f2 2008.0/x86_64/openoffice.org64-l10n-ca-2.2.1-4.4mdv2008.0.x86_64.rpm 17022bd83ffc77f40c23402b97a7bb10 2008.0/x86_64/openoffice.org64-l10n-cs-2.2.1-4.4mdv2008.0.x86_64.rpm 1de183c4eb4887d6d94acce507c46a1a 2008.0/x86_64/openoffice.org64-l10n-cy-2.2.1-4.4mdv2008.0.x86_64.rpm 10eaeace55b3e0b4e046534ae970f4f8 2008.0/x86_64/openoffice.org64-l10n-da-2.2.1-4.4mdv2008.0.x86_64.rpm b8db206a858975564012b07dccf6b04d 2008.0/x86_64/openoffice.org64-l10n-de-2.2.1-4.4mdv2008.0.x86_64.rpm 1a378d25c97f50eae98eaee30806862f 2008.0/x86_64/openoffice.org64-l10n-el-2.2.1-4.4mdv2008.0.x86_64.rpm 4fb1c541bdbc652a14d2594d122f9ee0 2008.0/x86_64/openoffice.org64-l10n-en_GB-2.2.1-4.4mdv2008.0.x86_64.rpm b3ae3401e85038f66121966ff2e7ea00 2008.0/x86_64/openoffice.org64-l10n-es-2.2.1-4.4mdv2008.0.x86_64.rpm 889faa8d4ab290954184641245f5b438 2008.0/x86_64/openoffice.org64-l10n-et-2.2.1-4.4mdv2008.0.x86_64.rpm c37864e8b058984d70e761ee3d8f856a 2008.0/x86_64/openoffice.org64-l10n-eu-2.2.1-4.4mdv2008.0.x86_64.rpm 260ed7c026eb35106190b752eaaecff7 2008.0/x86_64/openoffice.org64-l10n-fi-2.2.1-4.4mdv2008.0.x86_64.rpm 7547ae71398a8d4de6fb2762c787f08e 2008.0/x86_64/openoffice.org64-l10n-fr-2.2.1-4.4mdv2008.0.x86_64.rpm 67448bcb4f018659d9d9670c4e5962b2 2008.0/x86_64/openoffice.org64-l10n-he-2.2.1-4.4mdv2008.0.x86_64.rpm 143a4383654d1b7a875876ec98e04933 2008.0/x86_64/openoffice.org64-l10n-hi-2.2.1-4.4mdv2008.0.x86_64.rpm 8fadf6144424230f66d3145440bb0496 2008.0/x86_64/openoffice.org64-l10n-hu-2.2.1-4.4mdv2008.0.x86_64.rpm 58bb3458e51dc5671f64fc3dfe4d90d1 2008.0/x86_64/openoffice.org64-l10n-it-2.2.1-4.4mdv2008.0.x86_64.rpm 9a4e6ec140a976c29792c8b33b3999e3 2008.0/x86_64/openoffice.org64-l10n-ja-2.2.1-4.4mdv2008.0.x86_64.rpm 20c2a64e76f07090708f2baaf44005c0 2008.0/x86_64/openoffice.org64-l10n-ko-2.2.1-4.4mdv2008.0.x86_64.rpm d4e56319f91841c3bf55a0fc35edae14 2008.0/x86_64/openoffice.org64-l10n-mk-2.2.1-4.4mdv2008.0.x86_64.rpm e53c696eb99a43f04443b23646a14759 2008.0/x86_64/openoffice.org64-l10n-nb-2.2.1-4.4mdv2008.0.x86_64.rpm 53f3f10ebc2bea28bbbc2cfbdb9ad709 2008.0/x86_64/openoffice.org64-l10n-nl-2.2.1-4.4mdv2008.0.x86_64.rpm f92283b6cebdaec9b69750a84b2788f0 2008.0/x86_64/openoffice.org64-l10n-nn-2.2.1-4.4mdv2008.0.x86_64.rpm 7b8351a79f6d7a2697a0951ccf367e23 2008.0/x86_64/openoffice.org64-l10n-pl-2.2.1-4.4mdv2008.0.x86_64.rpm 63a53749499281ab09f6bbd7f10afc53 2008.0/x86_64/openoffice.org64-l10n-pt-2.2.1-4.4mdv2008.0.x86_64.rpm 4b86a348590d07619d53a00ad2ba76d6 2008.0/x86_64/openoffice.org64-l10n-pt_BR-2.2.1-4.4mdv2008.0.x86_64.rpm fd9688c0f0e0667086c8ff2866b0bec0 2008.0/x86_64/openoffice.org64-l10n-ru-2.2.1-4.4mdv2008.0.x86_64.rpm e11d3f9d3cfdc0d0ee2f552dab06c2b8 2008.0/x86_64/openoffice.org64-l10n-sk-2.2.1-4.4mdv2008.0.x86_64.rpm f1e88e0f1c3893b280a1fa27d1ac3dd5 2008.0/x86_64/openoffice.org64-l10n-sl-2.2.1-4.4mdv2008.0.x86_64.rpm 530ebf4cb28e2447ae2b6ed8a270a3d2 2008.0/x86_64/openoffice.org64-l10n-sv-2.2.1-4.4mdv2008.0.x86_64.rpm 114ec61047b4fd849389f1b375a37678 2008.0/x86_64/openoffice.org64-l10n-ta-2.2.1-4.4mdv2008.0.x86_64.rpm 81a7be4777a6a2533cfd1c4d13bd8ffe 2008.0/x86_64/openoffice.org64-l10n-tr-2.2.1-4.4mdv2008.0.x86_64.rpm a79b6c988ddacbb65576965911f187ae 2008.0/x86_64/openoffice.org64-l10n-zh_CN-2.2.1-4.4mdv2008.0.x86_64.rpm 5ff29c0bcf13f362513db31b43afece2 2008.0/x86_64/openoffice.org64-l10n-zh_TW-2.2.1-4.4mdv2008.0.x86_64.rpm 8574f6c677faca78c6e26f050e5a880e 2008.0/x86_64/openoffice.org64-l10n-zu-2.2.1-4.4mdv2008.0.x86_64.rpm 8856df860bf381f5d92f962fceaa49c7 2008.0/x86_64/openoffice.org64-mono-2.2.1-4.4mdv2008.0.x86_64.rpm 3bfcc8d0f2008cf53b23eb1287fdb0b5 2008.0/x86_64/openoffice.org64-ooqstart-2.2.1-4.4mdv2008.0.x86_64.rpm 1f77c6c9cfb6a0aed77a33e12cf8f1f6 2008.0/SRPMS/openoffice.org-2.2.1-4.4mdv2008.0.src.rpm 84c73385fdcb1d0a1bc2c077f744a20f 2008.0/SRPMS/openoffice.org64-2.2.1-4.4mdv2008.0.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iD8DBQFIGyximqjQ0CJFipgRAjhzAJ92SagdMcfpQ+8+yUkIDfQwWHHXtQCdFatU AP1ht4X2KMYbLfHKsiEBKoY= =4vxy -----END PGP SIGNATURE-----