Fedora 13 : openoffice.org-3.2.0-12.35.fc13 (2011-0837)

High Nessus Plugin ID 52004

New! Vulnerability Priority Rating (VPR)

Tenable calculates a dynamic VPR for every vulnerability. VPR combines vulnerability information with threat intelligence and machine learning algorithms to predict which vulnerabilities are most likely to be exploited in attacks. Read more about what VPR is and how it's different from CVSS.

VPR Score: 5.9


The remote Fedora host is missing a security update.


- Thu Jan 27 2011 Caolan McNamara <caolanm at redhat.com>- 1:3.2.0-12.35

- CVE-2010-3450 Extensions and filter package files

- CVE-2010-3451 / CVE-2010-3452 RTF documents

- CVE-2010-3453 / CVE-2010-3454 Word documents

- CVE-2010-3689 LD_LIBRARY_PATH usage

- CVE-2010-4253 PNG graphics

- CVE-2010-4643 TGA graphics

- Resolves: rhbz#648475 Crash in scanner dialog

- Resolves: rhbz#657628 divide-by-zero

- Resolves: rhbz#657718 Crash in SwObjectFormatterTxtFrm

- Resolves: rhbz#660312 SDK setup script creates invalid variables (dtardon)

- Resolves: rhbz#663780 extend neon mutex locking

- Resoves: rhbz#577525 [abrt] crash in ImplRegionBase::~ImplRegionBase (dtardon)

- Tue Oct 26 2010 Caolan McNamara <caolanm at redhat.com>
- 1:3.2.0-12.34

- Resolves: rhbz#636521 crash in undo in sc

- Resolves: rhbz#641637 [abrt] [presentation-minimizer] crash in OptimizationStats::GetStatusValue (dtardon)

- make LD_PRELOAD of libsalalloc_malloc.so work again (dtardon)

- Resolves: rhbz#642996 [abrt] CffSubsetterContext::readDictOp (dtardon)

- Fri Oct 15 2010 Caolan McNamara <caolanm at redhat.com> - 1:3.2.0-12.33

- Resolves: rhbz#637838 Cropped pictures are displayed in entirety in handouts (dtardon)

- Tue Oct 12 2010 Caolan McNamara <caolanm at redhat.com>
- 1:3.2.0-12.32

- Resolves: rhbz#568277 workaround to avoid the crash (dtardon)

- Resolves: rhbz#631543 [abrt] crash on dereferencing dangling pointer passed down from SwCalc::Str2Double (dtardon)

- Resolves: rhbz#631823 Line and Filling toolbar glitch on theme change (caolanm)

- Resolves: rhbz#637738 threading problems with using libgcrypt via neon when libgcrypt which was initialized by cups to be non-thread safe (caolanm)

- Resolves: rhbz#632326 [abrt] [docx] _Construct<long, long> crash (dtardon)

- Fri Aug 13 2010 Caolan McNamara <caolanm at redhat.com>
- 1:3.2.0-12.31

- Resolves: rhbz#623800 gnome-shell/mutter focus problems

- Thu Aug 12 2010 Caolan McNamara <caolanm at redhat.com> - 1:3.2.0-12.30

- Resolves: rhbz#623609 CVE-2010-2935 CVE-2010-2936

- Mon Aug 9 2010 Caolan McNamara <caolanm at redhat.com>
- 1:3.2.0-12.29

- Resolves: rhbz#601621 avoid using mmap for copying files

- Sun Aug 8 2010 Caolan McNamara <caolanm at redhat.com>
- 1:3.2.0-12.28

- Resolves: rhbz#621248 32bit events in forms on 64bit

- Resolves rhbz#618047 Brackets incorrectly render in presentations (dtardon)

- Wed Aug 4 2010 Caolan McNamara <caolanm at redhat.com> - 1:3.2.0-12.27

- Resolves: rhbz#608114 cppu-lifecycle issues (caolanm)

- Resolves: rhbz#566831 [abrt] crash in GetFrmSize (dtardon)

- Resolves: rhbz#613278 [abrt] crash in SANE shutdown (caolanm)

- Resolves: rhbz#620390 [abrt] crash in SfxViewFrame::GetFrame (dtardon)

- Mon Jun 21 2010 Caolan McNamara <caolanm at redhat.com> - 1:3.2.0-12.26

[plus 34 lines in the Changelog]

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.


Update the affected openoffice.org package.

See Also










Plugin Details

Severity: High

ID: 52004

File Name: fedora_2011-0837.nasl

Version: 1.16

Type: local

Agent: unix

Published: 2011/02/17

Updated: 2021/01/11

Dependencies: 12634

Risk Information

Risk Factor: High

VPR Score: 5.9

CVSS v2.0

Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: p-cpe:/a:fedoraproject:fedora:openoffice.org, cpe:/o:fedoraproject:fedora:13

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2011/01/27

Vulnerability Publication Date: 2011/01/28

Reference Information

CVE: CVE-2010-3450, CVE-2010-3451, CVE-2010-3452, CVE-2010-3453, CVE-2010-3454, CVE-2010-3689, CVE-2010-4253, CVE-2010-4643

BID: 46031

FEDORA: 2011-0837