ID de Prueba:	1.3.6.1.4.1.25623.1.0.58915
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2007:0406
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2007:0406. OpenOffice.org is an office productivity suite that includes desktop applications such as a word processor, spreadsheet, presentation manager, formula editor, and drawing program. A heap overflow flaw was found in the RTF import filer. An attacker could create a carefully crafted RTF file that could cause OpenOffice.org to crash or possibly execute arbitrary code if the file was opened by a victim. (CVE-2007-0245) All users of OpenOffice.org are advised to upgrade to these updated packages, which contain a backported fix to correct this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2007-0406.html http://www.redhat.com/security/updates/classification/#important Risk factor : Critical CVSS Score: 9.3
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-0245 BugTraq ID: 24450 http://www.securityfocus.com/bid/24450 Bugtraq: 20070613 High risk vulnerability in OpenOffice RTF parser (Google Search) http://www.securityfocus.com/archive/1/471274/100/0/threaded Debian Security Information: DSA-1307 (Google Search) http://www.debian.org/security/2007/dsa-1307 http://www.gentoo.org/security/en/glsa/glsa-200707-02.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:144 http://osvdb.org/35378 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10002 http://www.redhat.com/support/errata/RHSA-2007-0406.html http://www.securitytracker.com/id?1018239 http://secunia.com/advisories/25648 http://secunia.com/advisories/25650 http://secunia.com/advisories/25673 http://secunia.com/advisories/25705 http://secunia.com/advisories/25862 http://secunia.com/advisories/25894 http://secunia.com/advisories/25905 http://secunia.com/advisories/26010 http://secunia.com/advisories/26022 http://secunia.com/advisories/26476 SGI Security Advisory: 20070602-01-P ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc http://sunsolve.sun.com/search/document.do?assetkey=1-26-102917-1 SuSE Security Announcement: SUSE-SA:2007:037 (Google Search) http://www.novell.com/linux/security/advisories/2007_37_openoffice.html http://www.ubuntu.com/usn/usn-482-1 http://www.vupen.com/english/advisories/2007/2166 http://www.vupen.com/english/advisories/2007/2229 XForce ISS Database: openoffice-rtf-bo(34843) https://exchange.xforce.ibmcloud.com/vulnerabilities/34843
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.