Retired: OpenOffice 'swriter' Unspecified Remote Code Execution Vulnerability

Bugtraq ID:	29142
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	May 10 2008 12:00AM
Updated:	May 10 2008 11:15PM
Credit:	[email protected]
Vulnerable:	OpenOffice OpenOffice 2.3.1
Not Vulnerable:	OpenOffice OpenOffice 2.4

Retired: OpenOffice 'swriter' Unspecified Remote Code Execution Vulnerability

OpenOffice is prone to a remote code-execution vulnerability because of errors in processing certain files.

Remote attackers can exploit these issues by enticing victims into opening maliciously crafted .doc file.

Successful exploits may allow attackers to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely result in a denial of service.

OpenOffice 2.31 is vulnerable; other versions may also be affected.

This BID is being retired as the vulnerability was previously documented in BID 28819 (OpenOffice Multiple Heap Based Buffer Overflow Vulnerabilities)

Retired: OpenOffice 'swriter' Unspecified Remote Code Execution Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/29142.c

Retired: OpenOffice 'swriter' Unspecified Remote Code Execution Vulnerability

Solution:
The vendor has released updates. Please see the references for more information.

Retired: OpenOffice 'swriter' Unspecified Remote Code Execution Vulnerability

References:

• OpenOffice Homepage (OpenOffice)
  
• OpenOffice.org Security Team Bulletin (OpenOffice)