Test ID:	1.3.6.1.4.1.25623.1.0.63193
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDVSA-2009:006 (openoffice.org)
Summary:	The remote host is missing an update to openoffice.org;announced via advisory MDVSA-2009:006.
Description:	Summary: The remote host is missing an update to openoffice.org announced via advisory MDVSA-2009:006. Vulnerability Insight: Heap-based overflow on functions to manipulate WMF and EMF files in OpenOffice.org documents enables remote attackers to execute arbitrary code on documents holding certain crafted either WMF or EMF files (CVE-2008-2237) (CVE-2008-2238). This update provide the fix for these security issues and further openoffice.org-voikko package has been updated as it depends on openoffice.org packages. Affected: 2008.0, 2008.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-2237 BugTraq ID: 31962 http://www.securityfocus.com/bid/31962 Debian Security Information: DSA-1661 (Google Search) http://www.debian.org/security/2008/dsa-1661 https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00905.html https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00923.html http://security.gentoo.org/glsa/glsa-200812-13.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10784 http://www.redhat.com/support/errata/RHSA-2008-0939.html http://www.securitytracker.com/id?1021120 http://secunia.com/advisories/32419 http://secunia.com/advisories/32461 http://secunia.com/advisories/32463 http://secunia.com/advisories/32489 http://secunia.com/advisories/32676 http://secunia.com/advisories/32856 http://secunia.com/advisories/32872 http://secunia.com/advisories/33140 http://sunsolve.sun.com/search/document.do?assetkey=1-26-242627-1 SuSE Security Announcement: SUSE-SR:2008:026 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html http://www.ubuntu.com/usn/usn-677-1 http://www.ubuntu.com/usn/usn-677-2 http://www.vupen.com/english/advisories/2008/2947 http://www.vupen.com/english/advisories/2008/3103 XForce ISS Database: openoffice-wmf-bo(46165) https://exchange.xforce.ibmcloud.com/vulnerabilities/46165 Common Vulnerability Exposure (CVE) ID: CVE-2008-2238 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=750 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10849 http://www.securitytracker.com/id?1021121 http://sunsolve.sun.com/search/document.do?assetkey=1-26-243226-1 http://www.vupen.com/english/advisories/2008/3153 XForce ISS Database: openoffice-emf-file-bo(46166) https://exchange.xforce.ibmcloud.com/vulnerabilities/46166
Copyright	Copyright (C) 2009 E-Soft Inc.

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.