• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

OpenOffice Multiple Heap Based Buffer Overflow Vulnerabilities

References:

• Multiple Vendor OpenOffice EMF EMR_BITBLT Record Integer Overflow Vulnerability (iDefense Labs)
  
• Multiple Vendor OpenOffice OLE DocumentSummaryInformation Heap Overflow Vulnerab (iDefense Labs)
  
• Multiple Vendor OpenOffice QPRO File Parsing Integer Underflow Vulnerability (iDefense Labs)
  
• Multiple Vendor OpenOffice QPRO Multiple Heap Overflow Vulnerabilities (iDefense Labs)
  
• OpenOffice Homepage (OpenOffice)
  
• OpenOffice.org Security Team Bulletin (OpenOffice)
  
• iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice EMF EMR_BITBLT R (iDefense Labs )
  
• iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice OLE DocumentSumm (iDefense Labs )
  
• iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice QPRO File Parsin (iDefense Labs )
  
• iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice QPRO Multiple He (iDefense Labs )
  
• 231601: Security Vulnerability With Quattro Pro Files in StarOffice 8/StarSuite (Sun)
  
• 231642: Security Vulnerability for OLE Files in StarOffice 7 and 8, StarSuite 7 (Sun)
  
• 231661: Manipulated EMF Files May Lead to Heap Overflows and Arbitrary Code Exec (Sun Microsystems)
  
• ASA-2008-185 (Avaya)
  
• ASA-2008-192Security Vulnerability for OLE Files in StarOffice 7 and 8, StarSuit (Avaya)
  
• CVE-2007-4770/4771 - Manipulated ODF text documents containing XForms can lead t (OpenOffice)
  
• CVE-2007-5745/5747 - Manipulated Quattro Pro files can lead to heap overflows an (OpenOffice)
  
• CVE-2007-5746 - Manipulated EMF files can lead to heap overflows and arbitrary c (OpenOffice)
  
• CVE-2008-0320 - Manipulated OLE files can lead to heap overflows and arbitrary c (OpenOffice)
  
• RHSA-2008:0175-7 openoffice.org security update (Red Hat)
  
• RHSA-2008:0176-7 openoffice.org security update (Red Hat)