Detections
Analytics
FreeBSD : openoffice -- arbitrary code execution vulnerabilities (842bafdd-be2f-11dd-a578-0030843d3802)
high Nessus Plugin ID 34979
Synopsis
The remote FreeBSD host is missing one or more security-related updates.Description
The OpenOffice Team reports :A security vulnerability with the way OpenOffice 2.x process WMF files may allow a remote unprivileged user who provides a StarOffice/StarSuite document that is opened by a local user to execute arbitrary commands on the system with the privileges of the user running StarOffice/StarSuite. No working exploit is known right now.
A security vulnerability with the way OpenOffice 2.x process EMF files may allow a remote unprivileged user who provides a StarOffice/StarSuite document that is opened by a local user to execute arbitrary commands on the system with the privileges of the user running StarOffice/StarSuite. No working exploit is known right now.
Solution
Update the affected packages.See Also
http://www.openoffice.org/security/cves/CVE-2008-2237.html
Plugin Details
Severity: High
ID: 34979
File Name: freebsd_pkg_842bafddbe2f11dda5780030843d3802.nasl
Version: 1.15
Type: local
Family: FreeBSD Local Security Checks
Published: 12/1/2008
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:openoffice.org-2, p-cpe:/a:freebsd:freebsd:openoffice.org-2-rc, p-cpe:/a:freebsd:freebsd:openoffice.org-2-devel, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Patch Publication Date: 11/29/2008
Vulnerability Publication Date: 10/29/2008
Reference Information
CVE: CVE-2008-2237, CVE-2008-2238
CWE: 119