CVE-2006-5870 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2006-5870
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-5870

Description: Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to execute arbitrary code via a crafted (a) WMF or (b) EMF file that triggers heap-based buffer overflows in (1) wmf/winwmf.cxx, during processing of META_ESCAPE records; and wmf/enhwmf.cxx, during processing of (2) EMR_POLYPOLYGON and (3) EMR_POLYPOLYGON16 records.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/31257 VULNWATCH http://archives.neohapsis.com/archives/vulnwatch/2007-q1/0002.htmly UBUNTU http://www.ubuntu.com/usn/usn-406-1 SUSE http://lists.suse.com/archive/suse-security-announce/2007-Jan/0001.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-102735-1 ST 1017466 SGI SAID Secunia Advisory: SA23712 Secunia Advisory: SA23683 Secunia Advisory: SA23682 Secunia Advisory: SA23620 Secunia Advisory: SA23549 Secunia Advisory: SA23612 Secunia Advisory: SA23616 Secunia Advisory: SA23711 Secunia Advisory: SA23762 Secunia Advisory: SA23600 Secunia Advisory: SA23920 REDHAT http://www.redhat.com/support/errata/RHSA-2007-0001.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8280 OSVDB 32610 32611 MISC http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-staroffice-suite/ MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:006 GENTOO http://security.gentoo.org/glsa/glsa-200701-07.xml FEDORA http://fedoranews.org/cms/node/2344 DEBIAN http://www.debian.org/security/2007/dsa-1246 CONFIRM http://www.openoffice.org/issues/show_bug.cgi?id=70042 http://www.openoffice.org/nonav/issues/showattachment.cgi/39509/alloc.overflows.wmf.patch CERT-VN 220288 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/456271/100/100/threaded http://www.securityfocus.com/archive/1/archive/1/455964/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/455943/100/0/threaded http://www.securityfocus.com/archive/1/455954/100/0/threaded http://www.securityfocus.com/archive/1/455947/100/0/threaded

Return to the previous page.