Mandriva- Advisories MDKSA-2007:064: Updated openoffice.org packages to address libwpd heap overflow vulnerabilities

[Mandriva]

Advisories MDKSA-2007:064: Updated openoffice.org packages to address libwpd heap overflow vulnerabilities
iDefense reported several overflow bugs in libwpd. An attacker
could create a carefully crafted Word Perfect file that could cause
an application linked with libwpd, such as OpenOffice, to crash or
possibly execute arbitrary code if the file was opened by a victim.

OpenOffice.org-2.X contains an embedded copy of libpwd, and as such
is susceptible to the same issues.

Updated packages have been rebuilt using the system libwpd to address
this issue.
http://mandrivausers.org/index.php?showtopic=40183
Array
Fri, 16 Mar 2007 21:09:16 +0000