ID de Prueba:	1.3.6.1.4.1.25623.1.0.90029
Categoría:	General
Título:	OpenOffice.org <= 2.4.1 vulnerability (Linux)
Resumen:	The remote host is probably affected by the vulnerabilities described in; CVE-2008-2152 or CVE-2008-3282 on 64-bit platform's;; OpenOffice.org <= 2.4.1 vulnerability;; Impact;; CVE-2008-2152; Integer overflow in the rtl_allocateMemory function in; sal/rtl/source/alloc_global.c in OpenOffice.org (OOo); 2.0 through 2.4 allows remote attackers to execute; arbitrary code via a crafted file that triggers a; heap-based buffer overflow.; CVE-2008-3282; Integer overflow in the rtl_allocateMemory function; in sal/rtl/source/alloc_global.c in the memory allocator; in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows; remote attackers to cause a denial of service (application; crash) or possibly execute arbitrary code via a crafted; document, related to a 'numeric truncation error, ' a; different vulnerability than CVE-2008-2152.
Descripción:	Summary: The remote host is probably affected by the vulnerabilities described in CVE-2008-2152 or CVE-2008-3282 on 64-bit platform's OpenOffice.org <= 2.4.1 vulnerability Impact CVE-2008-2152 Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in OpenOffice.org (OOo) 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow. CVE-2008-3282 Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document, related to a 'numeric truncation error, ' a different vulnerability than CVE-2008-2152. Solution: All OpenOffice.org users should upgrade to the latest version. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-2152 BugTraq ID: 29622 http://www.securityfocus.com/bid/29622 https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00385.html https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00473.html https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00499.html http://security.gentoo.org/glsa/glsa-200807-05.xml http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=714 http://www.mandriva.com/security/advisories?name=MDVSA-2008:137 http://www.mandriva.com/security/advisories?name=MDVSA-2008:138 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9787 http://www.redhat.com/support/errata/RHSA-2008-0537.html http://www.redhat.com/support/errata/RHSA-2008-0538.html http://www.securitytracker.com/id?1020219 http://secunia.com/advisories/30599 http://secunia.com/advisories/30633 http://secunia.com/advisories/30634 http://secunia.com/advisories/30635 http://secunia.com/advisories/31029 http://sunsolve.sun.com/search/document.do?assetkey=1-26-237944-1 http://www.vupen.com/english/advisories/2008/1773 http://www.vupen.com/english/advisories/2008/1804/references XForce ISS Database: openoffice-rtlallocatememory-bo(42957) https://exchange.xforce.ibmcloud.com/vulnerabilities/42957 Common Vulnerability Exposure (CVE) ID: CVE-2008-3282 BugTraq ID: 30866 http://www.securityfocus.com/bid/30866 https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00494.html https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00120.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11345 http://www.redhat.com/support/errata/RHSA-2008-0835.html http://securitytracker.com/id?1020764 http://secunia.com/advisories/31640 http://secunia.com/advisories/31646 http://secunia.com/advisories/31778 http://www.vupen.com/english/advisories/2008/2449 XForce ISS Database: openoffice-rtlallocatememory-code-execution(44742) https://exchange.xforce.ibmcloud.com/vulnerabilities/44742
Copyright	Copyright (C) 2008 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.