The update released today fixes a vulnerability found on 12 June that could be exploited by malicious attackers to compromise a user's system.
The attack uses specially crafted RTF files with a 'prtdata' tag that has a length parameter inconsistency, causing vtable entries to be overwritten.
This could cause a heap-based buffer overflow in OpenOffice.org 2.2.1 and earlier versions and allow remote attackers to execute arbitrary code.
Secunia rated the flaw, which affects openSuse 10.2, SuSE Linux 10, SuSE Linux 10.1 and SuSE Linux Desktop 1.x, as 'highly critical'.
Sun Microsystems warned that users affected by the attack would not be aware of it.
"There are no predictable symptoms that would indicate that this issue has occurred," said a Sun security briefing.
The flaw was brought to light by John Heasman of NGS Software.
.jpg&h=140&w=231&c=1&s=0)
.png&h=140&w=231&c=1&s=0)
.jpg&h=140&w=231&c=1&s=0)
RIMPA Live Convention 2026
What’s Next?
iTnews Benchmark Security Awards 2026
iTnews State of Security Breakfast Sydney
iTnews Executive Retreat - Security Leaders Edition - VIC
.jpg&h=140&w=231&c=1&s=0)
.jpg&h=140&w=231&c=1&s=0)
