The vulnerability was announced on the Secunia security website on 18 September and Red Hat provided a fix on the same day for its Enterprise Linux products.
However, an update to fix the problem in the free Fedora Linux has only just been released, despite Red Hat being its main sponsor.
The OpenOffice vulnerability is caused by integer overflows when processing certain tags within Tiff images.
The problem could be exploited to cause heap-based buffer overflows, possibly by tricking a user into opening a specially crafted document.
Successful exploitation could allow the execution of arbitrary code and compromise a user's system.
OpenOffice is a free office productivity suite that includes a word processor, spreadsheet, presentation manager, formula editor and drawing program.
Fedora patches old OpenOffice flaw
By
Matt Chapman
on
Oct 8, 2007 7:28AM
Fedora has fixed a 'highly critical' flaw in the OpenOffice suite of products more than two weeks after it was first discovered.
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
Promoted Content
How to turn digital complexity into competitive advantage
Promoted Content
Why Genworth Australia embraced low-code software development
.png&h=183&w=300&c=1&s=0)
Promoted Content
Accenture and Google Cloud team up to create a loveable, Australian-first, renewable energy product
Promoted Content
Security "mindset shift" needed to protect organisations
Sponsored Whitepapers
Free eBook: Digital Transformation 101 – for banks
Why financial services need to tackle their Middle Office
Learn: The latest way to transfer files between customers
Extracting the value of data using Unified Observability
Planning before the breach: You can’t protect what you can’t see
