Linus firm SuSE has fixed a flaw in the OpenOffice.org suite of programs more than two weeks after it was discovered.
The update released today fixes a vulnerability found on 12 June that could be exploited by malicious attackers to compromise a user's system.
The attack uses specially crafted RTF files with a 'prtdata' tag that has a length parameter inconsistency, causing vtable entries to be overwritten.
This could cause a heap-based buffer overflow in OpenOffice.org 2.2.1 and earlier versions and allow remote attackers to execute arbitrary code.
Secunia rated the flaw, which affects openSuse 10.2, SuSE Linux 10, SuSE Linux 10.1 and SuSE Linux Desktop 1.x, as 'highly critical'.
Sun Microsystems warned that users affected by the attack would not be aware of it.
"There are no predictable symptoms that would indicate that this issue has occurred," said a Sun security briefing.
The flaw was brought to light by John Heasman of NGS Software.
SuSE finally patches OpenOffice.org flaw
By
Matt Chapman
on Jun 30, 2007 5:22AM
RTF buffer overflow vulnerability could run code remotely.
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
Promoted Content
Why cloud data protection is about more than just backup
Promoted Content
Melbourne is now a more attractive location for IT geo-redundancy
Promoted Content
Four signs your organisation is paying a massive innovation tax, and how to fix it
Promoted Content
Do you know where your data sleeps at night?
Sponsored Whitepapers
The 5 steps to effective data protection
Understanding the next security control points: applications and workloads
Best security practices after rapid Digital Transformation
The CISO View 2021 Survey: Zero Trust and Privileged Access
How and why to backup your Office 365 tenant
