OpenOffice.org issues critical patches for older versions
TMCnet - World's Largest Communications and Technology Community
New Coverage :  Asterisk  |  Call Center Outsourcing  |  Call Recording  |  SIP Trunking  |  Hosted Exchange  |  PBX
Webinars
Channels by Topic
Share
 
| More
RSS-XML alerts
Print this page
E-mail this page to a friend
TMCnews
[October 30, 2008]

OpenOffice.org issues critical patches for older versions

(InfoWorld Daily Via Acquire Media NewsEdge) OpenOffice.org has released two patches that repair older versions of its open source office productivity suite.

The two vulnerabilities do not affect OpenOffice.org's latest 3.0 version, released earlier this month. Software versions prior to Version 2.4.2 are affected.

[ Learn how to secure your systems with Roger Grimes' Security Adviser blog and newsletter, both from InfoWorld. ]

The first vulnerability concerns Windows Metafile (WMF), an image file format, according to an advisory from OpenOffice.org.

The flaw can be exploited if a specially crafted StarOffice or StarSuite document with a WMF file is opened. StarOffice and StarSuite are office products from Sun Microsystems. A remote user would then have the same access privileges to the PC as the victim and could execute arbitrary code. No working exploit has yet been seen.



The second problem is essentially the same, but involves the Enhanced Metafile (EMF) format, an improved version of WMF used for printing graphics.

Again, if a StarOffice or StarSuite document is opened that maliciously manipulates the EMF format, a remote user could run code on the machine. Openoffice.org is unaware of a working exploit.


Copyright ? 2008 InfoWorld Media Group, Inc.

[ Back To TMCnet.com's Homepage ]

Bookmark mobile.TMCnet.com on your mobile phone now to stay on top of the latest tech news.
Featured White Papers
Featured White Paper RSS feed
Leveraging the Cloud to Create the Ultimate Customer Experience
Bridging the Great Divide: Best Practices for Integrating Social Media and Customer Service for Bottom Line Results
Five Steps to an Employee Effectiveness Model: Improve Business Results with Engaged Employees
view all white papers…
Top Stories
Today's TMCnet Top Stories and News Articles
Social Media Presenting New Challenges for IT Departments
HP Releases Additional webOS Code, Unveils New Mobile Browser
Angry Birds Flys into Facebook A Day Early
Demand for High Speed Internet Traffic Drives Wireless Backhaul Growth
Survey Shows Americans Would Give Up Their Spouse for the …
more of today's top stories...
Related VoIP News
Latest IP Communitions and VoIP News
New VoIP Systems from Computer Support Save Time and Money
GL Introduces PPP and ML-PPP Packet Data Analyzer Software
Alcatel-Lucent lightRadio Extends Broadband Access via Cellular and Wi-Fi Integration
Novatel's Ovation MC679 Released On TELUS' LTE Network
Telmex, Alcatel-Lucent Agree to a Deal that Will Bring Ultra-Fast Broadband to Mexico
blog comments powered by Disqus

Upcoming Events

ITEXPO West 2012
October 1- 4, 2012
The Austin Convention Center
Austin, Texas
4GWE Conference
October 1- 4, 2012
The Austin Convention Center
Austin, Texas
MSPAlliance MSPWorld™
October 1- 4, 2012
The Austin Convention Center
Austin, Texas

DevCon5
DevCon5 provides you with the information and tools you need to exploit the capabilities of revolutionary HTML5 technology
View all >>
Subscribe FREE to all of TMC's monthly magazines. Click here now.