OpenOffice.org has issued a patch for a security vulnerability affecting several versions of its open-source office suite. The latest version, 2.4.1, is available for download on the organization's Web site.

The vulnerability is a memory problem called a heap overflow, OpenOffice.org said in an advisory. It can be exploited if an attacker sends someone an OpenOffice.org document that can take advantage of the flaw, which would then allow the hacker "to execute arbitrary commands on the system with the privileges of the user running OpenOffice.org."

Download: Download Open Office
View: The full story @ InfoWorld


There is 1 additional comment
Advertisement
Quote this comment Reply to this comment #1 Posted by vetmarkjensen on 11 Jun 2008 - 16:54
For anyone interested in the technical side as posted by the research group credited with discovery, including a snippet of the OO.o code that shows and explains the problem, this is a good link:
http://labs.idefense.com/intelligence/vuln...play.php?id=714
[1]

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.


Scroll to the Top
....
My Preferences
....
Communicating with server
Loading
Please Wait...
....
Loading
 X 
....