OpenOffice Writer Component Remote Denial Of Service Vulnerability

Bugtraq ID:	24186
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	May 28 2007 12:00AM
Updated:	May 28 2007 10:51PM
Credit:	shinnai is credited with the discovery of this vulnerability.
Vulnerable:	OpenOffice OpenOffice 2.2
Not Vulnerable:

OpenOffice Writer Component Remote Denial Of Service Vulnerability

The OpenOffice 'Writer' component is prone to a remote denial-of-service vulnerability.

Successful exploits may allow remote attackers to cause denial-of-service conditions on the webserver running the affected application.

OpenOffice 2.2.0 is vulnerable; other versions may also be affected.

OpenOffice Writer Component Remote Denial Of Service Vulnerability

Sample exploit code has been provided:

• /data/vulnerabilities/exploits/24186.py

OpenOffice Writer Component Remote Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

OpenOffice Writer Component Remote Denial Of Service Vulnerability

References:

• OpenOffice Homepage (OpenOffice)