Vulnerability in OpenOffice
The current version of OpenOffice reportedly contains a security flaw that allows attackers to inject code into a system. The problem apparently only affects the 64-bit version of the office suite. No official patched version is currently available because the 64-bit binary releases only come from Linux distributors, not from developers.
The flaw has, however, already been remedied in the repositories of OpenOffice. Red Hat was one of the first distributors to publish new packages for 64-bit versions under RHEL Desktop Workstation V5 Client and Red Hat Enterprise Linux Desktop V5.
The vulnerability is the result of a flaw in the function rtl_allocateMemory on 64-bit systems; the function is designed to allow for access to memory outside of a defined array. The problem can reportedly be prevented during compilation by adding the option --with-alloc=system.
See also:
- openoffice.org security update, Red Hat error report.
- openoffice.org: numeric truncation error in memory allocator (64bit), Red Hat report on memory allocation error.
- Issue 92217, error in OpenOffice.
(trk)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/6/7/2/comingin310_4_kicker-4977194bfb0de0d7.png)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/3/2/3/comingin310_3_kicker-151cd7b9e9660f05.png)
