SuSE 11 Security Update : OpenOffice_org (SAT Patch Number 2080)

high Nessus Plugin ID 45064

Language:

New! Vulnerability Priority Rating (VPR)

Tenable calculates a dynamic VPR for every vulnerability. VPR combines vulnerability information with threat intelligence and machine learning algorithms to predict which vulnerabilities are most likely to be exploited in attacks. Read more about what VPR is and how it is different from CVSS.

VPR Score: 8.4

Synopsis

The remote SuSE 11 host is missing one or more security updates.

Description

This update of OpenOffice_org includes fixes for the following vulnerabilities :

- XML signature weakness. (CVE-2009-0217)

- XPM Import Integer Overflow. (CVE-2009-2949)

- GIF Import Heap Overflow. (CVE-2009-2950)

- MS Word sprmTDefTable Memory Corruption. (CVE-2009-3301)

- MS Word sprmTDefTable Memory Corruption. (CVE-2009-3302)

- In the ooo-build variant of OpenOffice_org VBA Macro support does not honor Macro security settings.
(CVE-2010-0136)

This also provides the maintenance update to OpenOffice.org-3.2.

Details about all upstream changes can be found at http://development.openoffice.org/releases/3.2.0.html

Solution

Apply SAT patch number 2080.

See Also

https://bugzilla.novell.com/show_bug.cgi?id=232232

https://bugzilla.novell.com/show_bug.cgi?id=370015

https://bugzilla.novell.com/show_bug.cgi?id=417818

https://bugzilla.novell.com/show_bug.cgi?id=438606

https://bugzilla.novell.com/show_bug.cgi?id=464436

https://bugzilla.novell.com/show_bug.cgi?id=464568

https://bugzilla.novell.com/show_bug.cgi?id=465102

https://bugzilla.novell.com/show_bug.cgi?id=473232

https://bugzilla.novell.com/show_bug.cgi?id=481242

https://bugzilla.novell.com/show_bug.cgi?id=485637

https://bugzilla.novell.com/show_bug.cgi?id=504623

https://bugzilla.novell.com/show_bug.cgi?id=515972

https://bugzilla.novell.com/show_bug.cgi?id=519715

https://bugzilla.novell.com/show_bug.cgi?id=521564

https://bugzilla.novell.com/show_bug.cgi?id=527738

https://bugzilla.novell.com/show_bug.cgi?id=529404

https://bugzilla.novell.com/show_bug.cgi?id=529532

https://bugzilla.novell.com/show_bug.cgi?id=535086

https://bugzilla.novell.com/show_bug.cgi?id=535087

https://bugzilla.novell.com/show_bug.cgi?id=535088

https://bugzilla.novell.com/show_bug.cgi?id=535089

https://bugzilla.novell.com/show_bug.cgi?id=535485

https://bugzilla.novell.com/show_bug.cgi?id=537541

https://bugzilla.novell.com/show_bug.cgi?id=537931

https://bugzilla.novell.com/show_bug.cgi?id=538559

https://bugzilla.novell.com/show_bug.cgi?id=539220

https://bugzilla.novell.com/show_bug.cgi?id=539282

https://bugzilla.novell.com/show_bug.cgi?id=539434

https://bugzilla.novell.com/show_bug.cgi?id=540225

https://bugzilla.novell.com/show_bug.cgi?id=540563

https://bugzilla.novell.com/show_bug.cgi?id=540566

https://bugzilla.novell.com/show_bug.cgi?id=540726

https://bugzilla.novell.com/show_bug.cgi?id=540923

https://bugzilla.novell.com/show_bug.cgi?id=540960

https://bugzilla.novell.com/show_bug.cgi?id=541058

https://bugzilla.novell.com/show_bug.cgi?id=541269

https://bugzilla.novell.com/show_bug.cgi?id=541735

https://bugzilla.novell.com/show_bug.cgi?id=541749

https://bugzilla.novell.com/show_bug.cgi?id=541755

https://bugzilla.novell.com/show_bug.cgi?id=541973

https://bugzilla.novell.com/show_bug.cgi?id=542024

https://bugzilla.novell.com/show_bug.cgi?id=542123

https://bugzilla.novell.com/show_bug.cgi?id=542132

https://bugzilla.novell.com/show_bug.cgi?id=542684

https://bugzilla.novell.com/show_bug.cgi?id=542854

https://bugzilla.novell.com/show_bug.cgi?id=544166

https://bugzilla.novell.com/show_bug.cgi?id=545287

https://bugzilla.novell.com/show_bug.cgi?id=545717

https://bugzilla.novell.com/show_bug.cgi?id=545815

https://bugzilla.novell.com/show_bug.cgi?id=546416

https://bugzilla.novell.com/show_bug.cgi?id=546421

https://bugzilla.novell.com/show_bug.cgi?id=546758

https://bugzilla.novell.com/show_bug.cgi?id=547157

https://bugzilla.novell.com/show_bug.cgi?id=547308

https://bugzilla.novell.com/show_bug.cgi?id=548116

https://bugzilla.novell.com/show_bug.cgi?id=548249

https://bugzilla.novell.com/show_bug.cgi?id=548354

https://bugzilla.novell.com/show_bug.cgi?id=548534

https://bugzilla.novell.com/show_bug.cgi?id=548701

https://bugzilla.novell.com/show_bug.cgi?id=549300

https://bugzilla.novell.com/show_bug.cgi?id=549331

https://bugzilla.novell.com/show_bug.cgi?id=549383

https://bugzilla.novell.com/show_bug.cgi?id=549728

https://bugzilla.novell.com/show_bug.cgi?id=551402

https://bugzilla.novell.com/show_bug.cgi?id=552450

https://bugzilla.novell.com/show_bug.cgi?id=553219

https://bugzilla.novell.com/show_bug.cgi?id=553819

https://bugzilla.novell.com/show_bug.cgi?id=554261

https://bugzilla.novell.com/show_bug.cgi?id=554549

https://bugzilla.novell.com/show_bug.cgi?id=554955

https://bugzilla.novell.com/show_bug.cgi?id=555889

https://bugzilla.novell.com/show_bug.cgi?id=556125

https://bugzilla.novell.com/show_bug.cgi?id=556142

https://bugzilla.novell.com/show_bug.cgi?id=556268

https://bugzilla.novell.com/show_bug.cgi?id=556927

https://bugzilla.novell.com/show_bug.cgi?id=557230

https://bugzilla.novell.com/show_bug.cgi?id=557368

https://bugzilla.novell.com/show_bug.cgi?id=557475

https://bugzilla.novell.com/show_bug.cgi?id=557965

https://bugzilla.novell.com/show_bug.cgi?id=558505

https://bugzilla.novell.com/show_bug.cgi?id=558564

https://bugzilla.novell.com/show_bug.cgi?id=558577

https://bugzilla.novell.com/show_bug.cgi?id=558907

https://bugzilla.novell.com/show_bug.cgi?id=559393

https://bugzilla.novell.com/show_bug.cgi?id=559438

https://bugzilla.novell.com/show_bug.cgi?id=559445

https://bugzilla.novell.com/show_bug.cgi?id=560255

https://bugzilla.novell.com/show_bug.cgi?id=560355

https://bugzilla.novell.com/show_bug.cgi?id=560877

https://bugzilla.novell.com/show_bug.cgi?id=561639

https://bugzilla.novell.com/show_bug.cgi?id=564497

https://bugzilla.novell.com/show_bug.cgi?id=564503

https://bugzilla.novell.com/show_bug.cgi?id=564789

https://bugzilla.novell.com/show_bug.cgi?id=565184

https://bugzilla.novell.com/show_bug.cgi?id=566030

https://bugzilla.novell.com/show_bug.cgi?id=566581

https://bugzilla.novell.com/show_bug.cgi?id=568016

https://bugzilla.novell.com/show_bug.cgi?id=568146

https://bugzilla.novell.com/show_bug.cgi?id=568399

https://bugzilla.novell.com/show_bug.cgi?id=569266

https://bugzilla.novell.com/show_bug.cgi?id=569328

https://bugzilla.novell.com/show_bug.cgi?id=569348

https://bugzilla.novell.com/show_bug.cgi?id=571489

https://bugzilla.novell.com/show_bug.cgi?id=572372

https://bugzilla.novell.com/show_bug.cgi?id=573456

https://bugzilla.novell.com/show_bug.cgi?id=573938

https://bugzilla.novell.com/show_bug.cgi?id=575555

https://bugzilla.novell.com/show_bug.cgi?id=575653

https://bugzilla.novell.com/show_bug.cgi?id=575698

https://bugzilla.novell.com/show_bug.cgi?id=575704

https://bugzilla.novell.com/show_bug.cgi?id=577873

https://bugzilla.novell.com/show_bug.cgi?id=578730

https://bugzilla.novell.com/show_bug.cgi?id=581634

http://support.novell.com/security/cve/CVE-2009-0217.html

http://support.novell.com/security/cve/CVE-2009-2949.html

http://support.novell.com/security/cve/CVE-2009-2950.html

http://support.novell.com/security/cve/CVE-2009-3301.html

http://support.novell.com/security/cve/CVE-2009-3302.html

http://support.novell.com/security/cve/CVE-2010-0136.html

Plugin Details

Severity: High

ID: 45064

File Name: suse_11_OpenOffice_org-100226.nasl

Version: 1.14

Type: local

Agent: unix

Published: 3/16/2010

Updated: 1/14/2021

Dependencies: ssh_get_info.nasl

Risk Information

Risk Factor: High

VPR Score: 8.4

CVSS v2.0

Base Score: 9.3

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:novell:suse_linux:11:OpenOffice_org, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-LanguageTool, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-LanguageTool-de, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-LanguageTool-en, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-LanguageTool-es, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-LanguageTool-fr, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-LanguageTool-it, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-LanguageTool-nl, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-LanguageTool-pl, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-LanguageTool-sv, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-base, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-base-drivers-postgresql, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-base-extensions, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-calc, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-calc-extensions, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-components, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-draw, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-draw-extensions, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-filters, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-filters-optional, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-gnome, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-ar, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-cs, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-da, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-de, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-en-GB, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-en-US, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-en-US-devel, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-es, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-fr, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-gu-IN, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-hi-IN, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-hu, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-it, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-ja, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-ko, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-nl, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-pl, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-pt, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-pt-BR, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-ru, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-sv, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-zh-CN, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-help-zh-TW, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-icon-themes, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-impress, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-impress-extensions, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-kde, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-af, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-ar, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-ca, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-cs, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-da, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-de, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-el, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-en-GB, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-es, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-extras, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-fi, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-fr, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-gu-IN, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-hi-IN, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-hu, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-it, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-ja, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-ko, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-nb, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-nl, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-nn, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-pl, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-pt, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-pt-BR, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-ru, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-sk, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-sv, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-xh, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-zh-CN, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-zh-TW, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-l10n-zu, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-libs-core, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-libs-extern, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-libs-gui, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-mailmerge, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-math, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-mono, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-officebean, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-openclipart, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-pyuno, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-ure, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-writer, p-cpe:/a:novell:suse_linux:11:OpenOffice_org-writer-extensions, cpe:/o:novell:suse_linux:11

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2/26/2010

Exploitable With

Core Impact

Reference Information

CVE: CVE-2009-0217, CVE-2009-2949, CVE-2009-2950, CVE-2009-3301, CVE-2009-3302, CVE-2010-0136

CWE: 94, 119, 189