Vulnerabilities > CVE-2011-2713 - Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
PARTIAL Summary
oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted DOC file that triggers an out-of-bounds read in the DOC sprm parser.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
Common Attack Pattern Enumeration and Classification (CAPEC)
- Buffer Overflow via Environment Variables This attack pattern involves causing a buffer overflow through manipulation of environment variables. Once the attacker finds that they can modify an environment variable, they may try to overflow associated buffers. This attack leverages implicit trust often placed in environment variables.
- Overflow Buffers Buffer Overflow attacks target improper or missing bounds checking on buffer operations, typically triggered by input injected by an attacker. As a consequence, an attacker is able to write past the boundaries of allocated buffer regions in memory, causing a program crash or potentially redirection of execution as per the attackers' choice.
- Client-side Injection-induced Buffer Overflow This type of attack exploits a buffer overflow vulnerability in targeted client software through injection of malicious content from a custom-built hostile service.
- Filter Failure through Buffer Overflow In this attack, the idea is to cause an active filter to fail by causing an oversized transaction. An attacker may try to feed overly long input strings to the program in an attempt to overwhelm the filter (by causing a buffer overflow) and hoping that the filter does not fail securely (i.e. the user input is let into the system unfiltered).
- MIME Conversion An attacker exploits a weakness in the MIME conversion routine to cause a buffer overflow and gain control over the mail server machine. The MIME system is designed to allow various different information formats to be interpreted and sent via e-mail. Attack points exist when data are converted to MIME compatible format and back.
Nessus
NASL family Debian Local Security Checks NASL id DEBIAN_DSA-2315.NASL description Red Hat, Inc. security researcher Huzaifa Sidhpurwala reported multiple vulnerabilities in the binary Microsoft Word (doc) file format importer of OpenOffice.org, a full-featured office productivity suite that provides a near drop-in replacement for Microsoft Office. last seen 2020-03-17 modified 2011-10-06 plugin id 56393 published 2011-10-06 reporter This script is Copyright (C) 2011-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/56393 title Debian DSA-2315-1 : openoffice.org - multiple vulnerabilities code #%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Debian Security Advisory DSA-2315. The text # itself is copyright (C) Software in the Public Interest, Inc. # include("compat.inc"); if (description) { script_id(56393); script_version("1.10"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/03/12"); script_cve_id("CVE-2011-2713"); script_bugtraq_id(49969); script_xref(name:"DSA", value:"2315"); script_name(english:"Debian DSA-2315-1 : openoffice.org - multiple vulnerabilities"); script_summary(english:"Checks dpkg output for the updated package"); script_set_attribute( attribute:"synopsis", value:"The remote Debian host is missing a security-related update." ); script_set_attribute( attribute:"description", value: "Red Hat, Inc. security researcher Huzaifa Sidhpurwala reported multiple vulnerabilities in the binary Microsoft Word (doc) file format importer of OpenOffice.org, a full-featured office productivity suite that provides a near drop-in replacement for Microsoft Office." ); script_set_attribute( attribute:"see_also", value:"https://packages.debian.org/source/squeeze/openoffice.org" ); script_set_attribute( attribute:"see_also", value:"https://www.debian.org/security/2011/dsa-2315" ); script_set_attribute( attribute:"solution", value: "Upgrade the openoffice.org packages. For the oldstable distribution (lenny), this problem has been fixed in version 1:2.4.1+dfsg-1+lenny12. For the stable distribution (squeeze), this problem has been fixed in version 1:3.2.1-11+squeeze4." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"exploit_available", value:"false"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:openoffice.org"); script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:5.0"); script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:6.0"); script_set_attribute(attribute:"patch_publication_date", value:"2011/10/05"); script_set_attribute(attribute:"plugin_publication_date", value:"2011/10/06"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2011-2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Debian Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l"); exit(0); } include("audit.inc"); include("debian_package.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if (!get_kb_item("Host/Debian/release")) audit(AUDIT_OS_NOT, "Debian"); if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING); flag = 0; if (deb_check(release:"5.0", prefix:"openoffice.org", reference:"1:2.4.1+dfsg-1+lenny12")) flag++; if (deb_check(release:"6.0", prefix:"broffice.org", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"cli-uno-bridge", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"libuno-cli-basetypes1.0-cil", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"libuno-cli-cppuhelper1.0-cil", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"libuno-cli-oootypes1.0-cil", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"libuno-cli-ure1.0-cil", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"libuno-cli-uretypes1.0-cil", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"mozilla-openoffice.org", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-base", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-base-core", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-calc", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-common", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-core", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-dbg", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-dev", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-dev-doc", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-draw", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-dtd-officedocument1.0", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-emailmerge", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-evolution", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-filter-binfilter", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-filter-mobiledev", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-gcj", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-gnome", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-gtk", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-ca", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-cs", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-da", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-de", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-dz", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-el", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-en-gb", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-en-us", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-es", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-et", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-eu", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-fi", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-fr", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-gl", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-hi-in", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-hu", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-it", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-ja", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-km", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-ko", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-nl", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-om", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-pl", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-pt", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-pt-br", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-ru", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-sl", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-sv", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-zh-cn", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-help-zh-tw", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-impress", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-java-common", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-kde", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-af", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-ar", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-as", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-as-in", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-ast", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-be-by", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-bg", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-bn", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-br", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-bs", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-ca", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-cs", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-cy", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-da", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-de", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-dz", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-el", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-en-gb", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-en-za", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-eo", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-es", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-et", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-eu", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-fa", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-fi", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-fr", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-ga", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-gl", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-gu", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-gu-in", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-he", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-hi-in", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-hr", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-hu", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-id", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-in", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-it", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-ja", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-ka", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-km", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-ko", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-ku", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-lt", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-lv", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-mk", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-ml", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-ml-in", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-mn", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-mr", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-mr-in", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-nb", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-ne", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-nl", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-nn", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-nr", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-ns", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-oc", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-om", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-or", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-or-in", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-pa-in", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-pl", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-pt", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-pt-br", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-ro", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-ru", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-rw", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-si", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-sk", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-sl", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-sr", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-ss", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-st", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-sv", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-ta", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-ta-in", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-te", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-te-in", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-tg", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-th", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-tn", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-tr", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-ts", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-ug", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-uk", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-uz", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-ve", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-vi", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-xh", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-za", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-zh-cn", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-zh-tw", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-l10n-zu", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-math", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-mysql-connector", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-officebean", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-ogltrans", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-pdfimport", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-presentation-minimizer", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-presenter-console", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-report-builder", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-report-builder-bin", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-sdbc-postgresql", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-style-andromeda", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-style-crystal", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-style-galaxy", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-style-hicontrast", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-style-industrial", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-style-oxygen", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-style-tango", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-wiki-publisher", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"openoffice.org-writer", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"python-uno", reference:"1:3.2.1-11+squeeze4")) flag++; if (deb_check(release:"6.0", prefix:"ttf-opensymbol", reference:"1:3.2.1-11+squeeze4")) flag++; if (flag) { if (report_verbosity > 0) security_warning(port:0, extra:deb_report_get()); else security_warning(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");NASL family Gentoo Local Security Checks NASL id GENTOO_GLSA-201408-19.NASL description The remote host is affected by the vulnerability described in GLSA-201408-19 (OpenOffice, LibreOffice: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in OpenOffice and Libreoffice. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a specially crafted file using OpenOffice, possibly resulting in execution of arbitrary code with the privileges of the process, a Denial of Service condition, execution of arbitrary Python code, authentication bypass, or reading and writing of arbitrary files. Workaround : There is no known workaround at this time. last seen 2020-06-01 modified 2020-06-02 plugin id 77467 published 2014-09-01 reporter This script is Copyright (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/77467 title GLSA-201408-19 : OpenOffice, LibreOffice: Multiple vulnerabilities code # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Gentoo Linux Security Advisory GLSA 201408-19. # # The advisory text is Copyright (C) 2001-2019 Gentoo Foundation, Inc. # and licensed under the Creative Commons - Attribution / Share Alike # license. See http://creativecommons.org/licenses/by-sa/3.0/ # include("compat.inc"); if (description) { script_id(77467); script_version("1.10"); script_cvs_date("Date: 2019/08/12 17:35:38"); script_cve_id("CVE-2006-4339", "CVE-2009-0200", "CVE-2009-0201", "CVE-2009-0217", "CVE-2009-2949", "CVE-2009-2950", "CVE-2009-3301", "CVE-2009-3302", "CVE-2010-0395", "CVE-2010-2935", "CVE-2010-2936", "CVE-2010-3450", "CVE-2010-3451", "CVE-2010-3452", "CVE-2010-3453", "CVE-2010-3454", "CVE-2010-3689", "CVE-2010-4253", "CVE-2010-4643", "CVE-2011-2713", "CVE-2012-0037", "CVE-2012-1149", "CVE-2012-2149", "CVE-2012-2334", "CVE-2012-2665", "CVE-2014-0247"); script_bugtraq_id(35671, 36200, 38218, 40599, 42202, 46031, 49969, 52681, 53570, 54769, 68151); script_xref(name:"GLSA", value:"201408-19"); script_name(english:"GLSA-201408-19 : OpenOffice, LibreOffice: Multiple vulnerabilities"); script_summary(english:"Checks for updated package(s) in /var/db/pkg"); script_set_attribute( attribute:"synopsis", value: "The remote Gentoo host is missing one or more security-related patches." ); script_set_attribute( attribute:"description", value: "The remote host is affected by the vulnerability described in GLSA-201408-19 (OpenOffice, LibreOffice: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in OpenOffice and Libreoffice. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a specially crafted file using OpenOffice, possibly resulting in execution of arbitrary code with the privileges of the process, a Denial of Service condition, execution of arbitrary Python code, authentication bypass, or reading and writing of arbitrary files. Workaround : There is no known workaround at this time." ); script_set_attribute( attribute:"see_also", value:"https://security.gentoo.org/glsa/201408-19" ); script_set_attribute( attribute:"solution", value: "All OpenOffice (binary) users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=app-office/openoffice-bin-3.5.5.3' All LibreOffice users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=app-office/libreoffice-4.2.5.2' All LibreOffice (binary) users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=app-office/libreoffice-bin-4.2.5.2' We recommend that users unmerge OpenOffice: # emerge --unmerge 'app-office/openoffice'" ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C"); script_set_cvss_temporal_vector("CVSS2#E:F/RL:OF/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available"); script_set_attribute(attribute:"exploit_available", value:"true"); script_set_attribute(attribute:"exploit_framework_core", value:"true"); script_cwe_id(94, 119, 189, 310); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:gentoo:linux:libreoffice"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:gentoo:linux:libreoffice-bin"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:gentoo:linux:openoffice"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:gentoo:linux:openoffice-bin"); script_set_attribute(attribute:"cpe", value:"cpe:/o:gentoo:linux"); script_set_attribute(attribute:"vuln_publication_date", value:"2006/09/05"); script_set_attribute(attribute:"patch_publication_date", value:"2014/08/31"); script_set_attribute(attribute:"plugin_publication_date", value:"2014/09/01"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Gentoo Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/Gentoo/release", "Host/Gentoo/qpkg-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("qpkg.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if (!get_kb_item("Host/Gentoo/release")) audit(AUDIT_OS_NOT, "Gentoo"); if (!get_kb_item("Host/Gentoo/qpkg-list")) audit(AUDIT_PACKAGE_LIST_MISSING); flag = 0; if (qpkg_check(package:"app-office/libreoffice", unaffected:make_list("ge 4.2.5.2"), vulnerable:make_list("lt 4.2.5.2"))) flag++; if (qpkg_check(package:"app-office/libreoffice-bin", unaffected:make_list("ge 4.2.5.2"), vulnerable:make_list("lt 4.2.5.2"))) flag++; if (qpkg_check(package:"app-office/openoffice-bin", unaffected:make_list("ge 3.5.5.3"), vulnerable:make_list("lt 3.5.5.3"))) flag++; if (qpkg_check(package:"app-office/openoffice", unaffected:make_list(), vulnerable:make_list("le 3.5.5.3"))) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:qpkg_report_get()); else security_hole(0); exit(0); } else { tested = qpkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "OpenOffice / LibreOffice"); }NASL family Mandriva Local Security Checks NASL id MANDRIVA_MDVSA-2011-172.NASL description Multiple vulnerabilies has been discovered and corrected in libreoffice : Stack-based buffer overflow in the Lotus Word Pro import filter in LibreOffice before 3.3.3 allows remote attackers to execute arbitrary code via a crafted .lwp file (CVE-2011-2685). oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted DOC file that triggers an out-of-bounds read in the DOC sprm parser (CVE-2011-2713). This update brings a new LibreOffice version 3.4.3 release linked against stdc++ and gcc_s standard libraries available in the Mandriva 2011 and solves installing conflicts with libstdc++ (#64224). The package clipart-openclipart was dropped from the main repository in the Mandriva 2011. However it is not required having clipart-openclipart installed in order to install libreoffice-openclipart as the LibreOffice still provides some cliparts directly in that package (#63634). This update fixes some OpenOffice.org leftovers in some packages description replacing that by LibreOffice (#64658). This update brings new LibreOffice l10n locale packages: Assanese as, Bengali bn, Dzongkha dz, Farsi fa, Irish ga, Galician gl, Gujarati gu, Croatian hr, Kannada kn, Lithuanian lt, Latvian lv, Maithili mai, Malayalam ml, Marathi mr, Ndebele nr, Northern Shoto nso, Oriya or, Punjabi pa_IN, Romanian ro, Secwepemctsin sh, Sinhalese si, Serbian sr, Swati ss, Shoto st, Telugu te, Thai th, Tswana tn, Tsonga ts, Ukrainian uk, Venda ve and Xhosa xh. Help packages are also provided for: bn, dz, gl, gu, hr, si and uk. Additionally the gaupol packages are being provided to solve a build dependcy of some of the supporting tools already added into 2011. The updated packages have been upgraded to LibreOffice version 3.4.3 where these isssues has been resolved. last seen 2020-06-01 modified 2020-06-02 plugin id 61936 published 2012-09-06 reporter This script is Copyright (C) 2012-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/61936 title Mandriva Linux Security Advisory : libreoffice (MDVSA-2011:172) code #%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Mandriva Linux Security Advisory MDVSA-2011:172. # The text itself is copyright (C) Mandriva S.A. # include("compat.inc"); if (description) { script_id(61936); script_version("1.6"); script_cvs_date("Date: 2019/08/02 13:32:54"); script_cve_id("CVE-2011-2685", "CVE-2011-2713"); script_bugtraq_id(48387, 49969); script_xref(name:"MDVSA", value:"2011:172"); script_name(english:"Mandriva Linux Security Advisory : libreoffice (MDVSA-2011:172)"); script_summary(english:"Checks rpm output for the updated packages"); script_set_attribute( attribute:"synopsis", value: "The remote Mandriva Linux host is missing one or more security updates." ); script_set_attribute( attribute:"description", value: "Multiple vulnerabilies has been discovered and corrected in libreoffice : Stack-based buffer overflow in the Lotus Word Pro import filter in LibreOffice before 3.3.3 allows remote attackers to execute arbitrary code via a crafted .lwp file (CVE-2011-2685). oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted DOC file that triggers an out-of-bounds read in the DOC sprm parser (CVE-2011-2713). This update brings a new LibreOffice version 3.4.3 release linked against stdc++ and gcc_s standard libraries available in the Mandriva 2011 and solves installing conflicts with libstdc++ (#64224). The package clipart-openclipart was dropped from the main repository in the Mandriva 2011. However it is not required having clipart-openclipart installed in order to install libreoffice-openclipart as the LibreOffice still provides some cliparts directly in that package (#63634). This update fixes some OpenOffice.org leftovers in some packages description replacing that by LibreOffice (#64658). This update brings new LibreOffice l10n locale packages: Assanese as, Bengali bn, Dzongkha dz, Farsi fa, Irish ga, Galician gl, Gujarati gu, Croatian hr, Kannada kn, Lithuanian lt, Latvian lv, Maithili mai, Malayalam ml, Marathi mr, Ndebele nr, Northern Shoto nso, Oriya or, Punjabi pa_IN, Romanian ro, Secwepemctsin sh, Sinhalese si, Serbian sr, Swati ss, Shoto st, Telugu te, Thai th, Tswana tn, Tsonga ts, Ukrainian uk, Venda ve and Xhosa xh. Help packages are also provided for: bn, dz, gl, gu, hr, si and uk. Additionally the gaupol packages are being provided to solve a build dependcy of some of the supporting tools already added into 2011. The updated packages have been upgraded to LibreOffice version 3.4.3 where these isssues has been resolved." ); script_set_attribute(attribute:"solution", value:"Update the affected packages."); script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"exploit_available", value:"false"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:gaupol"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64graphite2-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64graphite2_2"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libgraphite2-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libgraphite2_2"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-base"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-calc"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-common"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-core"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-devel-doc"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-draw"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-filter-binfilter"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-gnome"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-bg"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-bn"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-bs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-ca"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-cs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-da"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-de"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-dz"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-el"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-en_GB"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-en_US"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-es"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-et"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-eu"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-fi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-fr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-gl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-gu"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-he"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-hi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-hr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-hu"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-it"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-ja"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-ko"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-mk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-nb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-nl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-nn"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-pl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-pt"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-pt_BR"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-ru"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-si"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-sk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-sl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-sv"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-tr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-uk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-zh_CN"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-help-zh_TW"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-impress"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-java-common"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-kde4"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-af"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-ar"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-as"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-bg"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-bn"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-br"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-bs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-ca"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-cs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-cy"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-da"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-de"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-dz"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-el"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-en_GB"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-es"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-et"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-eu"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-fa"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-fi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-fr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-ga"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-gl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-gu"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-he"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-hi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-hr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-hu"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-it"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-ja"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-kn"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-ko"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-lt"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-lv"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-mai"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-mk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-ml"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-mr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-nb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-nl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-nn"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-nr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-nso"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-or"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-pa_IN"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-pl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-pt"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-pt_BR"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-ro"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-ru"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-sh"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-si"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-sk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-sl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-sr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-ss"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-st"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-sv"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-ta"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-te"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-th"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-tn"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-tr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-ts"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-uk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-ve"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-xh"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-zh_CN"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-zh_TW"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-l10n-zu"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-math"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-openclipart"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-pdfimport"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-presentation-minimizer"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-presenter-screen"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-pyuno"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-style-crystal"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-style-galaxy"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-style-hicontrast"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-style-oxygen"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-style-tango"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-testtool"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-wiki-publisher"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libreoffice-writer"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:python-aeidon"); script_set_attribute(attribute:"cpe", value:"cpe:/o:mandriva:linux:2011"); script_set_attribute(attribute:"patch_publication_date", value:"2011/11/11"); script_set_attribute(attribute:"plugin_publication_date", value:"2012/09/06"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2012-2019 Tenable Network Security, Inc."); script_family(english:"Mandriva Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/Mandrake/release", "Host/Mandrake/rpm-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if (!get_kb_item("Host/Mandrake/release")) audit(AUDIT_OS_NOT, "Mandriva / Mandake Linux"); if (!get_kb_item("Host/Mandrake/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if (cpu !~ "^(amd64|i[3-6]86|x86_64)$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Mandriva / Mandrake Linux", cpu); flag = 0; if (rpm_check(release:"MDK2011", reference:"gaupol-0.18-1.1-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", cpu:"x86_64", reference:"lib64graphite2-devel-1.0.3-0.1-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", cpu:"x86_64", reference:"lib64graphite2_2-1.0.3-0.1-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", cpu:"i386", reference:"libgraphite2-devel-1.0.3-0.1-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", cpu:"i386", reference:"libgraphite2_2-1.0.3-0.1-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-base-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-calc-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-common-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-core-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-devel-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-devel-doc-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-draw-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-filter-binfilter-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-gnome-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-bg-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-bn-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-bs-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-ca-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-cs-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-da-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-de-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-dz-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-el-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-en_GB-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-en_US-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-es-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-et-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-eu-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-fi-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-fr-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-gl-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-gu-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-he-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-hi-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-hr-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-hu-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-it-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-ja-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-ko-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-mk-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-nb-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-nl-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-nn-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-pl-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-pt-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-pt_BR-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-ru-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-si-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-sk-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-sl-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-sv-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-tr-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-uk-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-zh_CN-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-help-zh_TW-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-impress-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-java-common-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-kde4-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-af-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-ar-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-as-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-bg-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-bn-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-br-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-bs-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-ca-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-cs-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-cy-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-da-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-de-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-dz-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-el-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-en_GB-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-es-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-et-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-eu-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-fa-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-fi-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-fr-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-ga-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-gl-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-gu-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-he-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-hi-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-hr-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-hu-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-it-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-ja-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-kn-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-ko-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-lt-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-lv-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-mai-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-mk-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-ml-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-mr-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-nb-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-nl-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-nn-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-nr-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-nso-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-or-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-pa_IN-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-pl-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-pt-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-pt_BR-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-ro-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-ru-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-sh-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-si-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-sk-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-sl-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-sr-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-ss-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-st-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-sv-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-ta-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-te-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-th-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-tn-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-tr-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-ts-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-uk-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-ve-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-xh-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-zh_CN-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-zh_TW-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-l10n-zu-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-math-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-openclipart-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-pdfimport-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-presentation-minimizer-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-presenter-screen-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-pyuno-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-style-crystal-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-style-galaxy-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-style-hicontrast-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-style-oxygen-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-style-tango-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-testtool-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-wiki-publisher-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"libreoffice-writer-3.4.3-2.2-mdv2011.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2011", reference:"python-aeidon-0.18-1.1-mdv2011.0", yank:"mdv")) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get()); else security_hole(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");NASL family Ubuntu Local Security Checks NASL id UBUNTU_USN-1496-1.NASL description A stack-based buffer overflow was discovered in the Lotus Word Pro import filter in OpenOffice.org. The default compiler options for affected releases should reduce the vulnerability to a denial of service. (CVE-2011-2685) Huzaifa Sidhpurwala discovered that OpenOffice.org could be made to crash if it opened a specially crafted Word document. (CVE-2011-2713) Integer overflows were discovered in the graphics loading code of several different image types. If a user were tricked into opening a specially crafted file, an attacker could cause OpenOffice.org to crash or possibly execute arbitrary code with the privileges of the user invoking the program. (CVE-2012-1149) Sven Jacobi discovered an integer overflow when processing Escher graphics records. If a user were tricked into opening a specially crafted PowerPoint file, an attacker could cause OpenOffice.org to crash or possibly execute arbitrary code with the privileges of the user invoking the program. (CVE-2012-2334). Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 59833 published 2012-07-03 reporter Ubuntu Security Notice (C) 2012-2019 Canonical, Inc. / NASL script (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/59833 title Ubuntu 10.04 LTS : openoffice.org vulnerabilities (USN-1496-1) code # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Ubuntu Security Notice USN-1496-1. The text # itself is copyright (C) Canonical, Inc. See # <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered # trademark of Canonical, Inc. # include("compat.inc"); if (description) { script_id(59833); script_version("1.8"); script_cvs_date("Date: 2019/09/19 12:54:28"); script_cve_id("CVE-2011-2685", "CVE-2011-2713", "CVE-2012-1149", "CVE-2012-2334"); script_bugtraq_id(49969, 53570); script_xref(name:"USN", value:"1496-1"); script_name(english:"Ubuntu 10.04 LTS : openoffice.org vulnerabilities (USN-1496-1)"); script_summary(english:"Checks dpkg output for updated package."); script_set_attribute( attribute:"synopsis", value:"The remote Ubuntu host is missing a security-related patch." ); script_set_attribute( attribute:"description", value: "A stack-based buffer overflow was discovered in the Lotus Word Pro import filter in OpenOffice.org. The default compiler options for affected releases should reduce the vulnerability to a denial of service. (CVE-2011-2685) Huzaifa Sidhpurwala discovered that OpenOffice.org could be made to crash if it opened a specially crafted Word document. (CVE-2011-2713) Integer overflows were discovered in the graphics loading code of several different image types. If a user were tricked into opening a specially crafted file, an attacker could cause OpenOffice.org to crash or possibly execute arbitrary code with the privileges of the user invoking the program. (CVE-2012-1149) Sven Jacobi discovered an integer overflow when processing Escher graphics records. If a user were tricked into opening a specially crafted PowerPoint file, an attacker could cause OpenOffice.org to crash or possibly execute arbitrary code with the privileges of the user invoking the program. (CVE-2012-2334). Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues." ); script_set_attribute( attribute:"see_also", value:"https://usn.ubuntu.com/1496-1/" ); script_set_attribute( attribute:"solution", value:"Update the affected openoffice.org-core package." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"exploit_available", value:"false"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openoffice.org-core"); script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:10.04:-:lts"); script_set_attribute(attribute:"vuln_publication_date", value:"2011/07/21"); script_set_attribute(attribute:"patch_publication_date", value:"2012/07/02"); script_set_attribute(attribute:"plugin_publication_date", value:"2012/07/03"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"Ubuntu Security Notice (C) 2012-2019 Canonical, Inc. / NASL script (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Ubuntu Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/cpu", "Host/Ubuntu", "Host/Ubuntu/release", "Host/Debian/dpkg-l"); exit(0); } include("audit.inc"); include("ubuntu.inc"); include("misc_func.inc"); if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/Ubuntu/release"); if ( isnull(release) ) audit(AUDIT_OS_NOT, "Ubuntu"); release = chomp(release); if (! preg(pattern:"^(10\.04)$", string:release)) audit(AUDIT_OS_NOT, "Ubuntu 10.04", "Ubuntu " + release); if ( ! get_kb_item("Host/Debian/dpkg-l") ) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Ubuntu", cpu); flag = 0; if (ubuntu_check(osver:"10.04", pkgname:"openoffice.org-core", pkgver:"1:3.2.0-7ubuntu4.3")) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_HOLE, extra : ubuntu_report_get() ); exit(0); } else { tested = ubuntu_pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "openoffice.org-core"); }NASL family Gentoo Local Security Checks NASL id GENTOO_GLSA-201209-05.NASL description The remote host is affected by the vulnerability described in GLSA-201209-05 (LibreOffice: Multiple vulnerabilities) Multiple vulnerabilities have been found in LibreOffice: The Microsoft Word Document parser contains an out-of-bounds read error (CVE-2011-2713). The Raptor RDF parser contains an XML External Entity expansion error (CVE-2012-0037). The graphic loading parser contains an integer overflow error which could cause a heap-based buffer overflow (CVE-2012-1149). Multiple errors in the XML manifest handling code could cause a heap-based buffer overflow (CVE-2012-2665). Impact : A remote attacker could entice a user to open a specially crafted document file using LibreOffice, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition. Workaround : There is no known workaround at this time. last seen 2020-06-01 modified 2020-06-02 plugin id 62286 published 2012-09-25 reporter This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/62286 title GLSA-201209-05 : LibreOffice: Multiple vulnerabilities NASL family Fedora Local Security Checks NASL id FEDORA_2011-14049.NASL description Update for OpenOffice.org to handle parsing invalid .doc property lists Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 56547 published 2011-10-19 reporter This script is Copyright (C) 2011-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/56547 title Fedora 14 : openoffice.org-3.3.0-20.8.fc14 (2011-14049) NASL family SuSE Local Security Checks NASL id SUSE_11_4_LIBREOFFICE-34-111007.NASL description LibreOffice 3.4 includes new interesting features and fixes, see http://www.libreoffice.org/download/3-4-new-features-and-fix es/ The update fixes the following security issue : - 704311: libreoffice Lotus Word Pro filter multiple vulnerabilities (CVE-2011-2685) - 722075: LibreOffice: Out-of-bounds read in DOC sprm (CVE-2011-2713) This update also fixes the following non-security issues : - 647959: LibO has a regression problem to show emf charts properly. - 650049: pptx presentation has text in boxes and circles. Only text is displayed. - 651250: Video and Audio does not play in slide show mode of LibO Impress. - 652562: LibreOffice crashes on start on 11.4-MS3 NET/DVD install - 653662: libreoffice build calls mkbundle2 (deprecated) instead of mkbundle - 663622: Writer crash during document save - 665112: could not type or edit office document - 675868: eliminate wording of ooconvert existed in loconvert --help - 675961: Libreoffice Copy paste of formula in Writer tables does not work as expected - 676858: Document with full page graphic in header will not allow click-drag or right-click. - 678998: Libre Office 3.3.1 does not detect KDE3 - 680272: Deleting multiple sheets results in run-time error/crash - 681738: DDE link is lost when .xls file is opened/saved in Calc. - 683578: Large xlsx file takes extremely long to open with Libreoffice calc - 684784: Microsoft Office spreadsheet does not display anything - 693238: Column format in docx file is not displayed correctly. - 693477: Format of Word .doc file from HP is bad. - 694119: Using File-->Send-->Document as E-mail will crash Impress - 694344: 3rd level bulleted items are not displayed properly. - 695479: L3: RTF file is not displayed correctly by Writer. - 696630: DDE link from Calc to Excel needs Excel open to update link in Calc. - 702506: Writer crashes when opening docx files. - 704639: HTML document appearance changes when opened in open office vs LibreOffice - 704642: 16 digit numbers change in LibreOffice when opening a file created in MS Excel - 705949: Information missing from MS Word document when opened in LibreOffice (w:sdt) - 706792: PTF 3.3.1-21 introduced a crash when opening a pptx presentation. - 707486: Macro from excel fails on Selection.Copy when run in Calc. - 707779: Disappearing text - 708137: xls spreadsheet is extremely slow to open and check boxes are broken. - 708518: Bullet symbol is not rendered correctly in a specific slide. - 710061: ODP export to PDF produces broken images - 710920: RPM installation ending with redundant error. - 711977: File association for fod* files are missing. - 712358: Some extensions broken after upgrading. - 715268: Command libreoffice --help does not work when LibreOffice is already started - 715856: LibreOffice:Stable/libreoffice-converter: Bug - 715416: Impress crashes starting Slide show in the context of dual monitors extension mode. - 715931: failed to save an odp file. - 717262: libtool adds /usr/lib64 into rpath last seen 2020-06-01 modified 2020-06-02 plugin id 75919 published 2014-06-13 reporter This script is Copyright (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/75919 title openSUSE Security Update : libreoffice-34 (openSUSE-SU-2011:1143-2) NASL family SuSE Local Security Checks NASL id SUSE_LIBREOFFICE-34-7791.NASL description LibreOffice 3.4 includes many interesting features and fixes, see http://www.libreoffice.org/download/3-4-new-features-and-fixes/ The update fixes the following security issues : - 704311: libreoffice Lotus Word Pro filter multiple vulnerabilities. (CVE-2011-2685) This update also fixes the following non-security issues : - 676858: Document with full page graphic in header will not allow click-drag or right-click. - 681738: DDE link is lost when .xls file is opened/saved in Calc. - 683578: Large xlsx file takes extremely long to open with Libreoffice calc - 684784: Microsoft Office spreadsheet does not display anything - 693238: Column format in docx file is not displayed correctly. - 693477: Format of Word .doc file from HP is bad. - 694344: 3rd level bulleted items are not displayed properly. - 695479: L3: RTF file is not displayed correctly by Writer. - 696630: DDE link from Calc to Excel needs Excel open to update link in Calc. - 702506: Writer crashes when opening docx files. - 704639: HTML document appearance changes when opened in open office vs LibreOffice - 704642: 16 digit numbers change in LibreOffice when opening a file created in MS Excel - 705949: Information missing from MS Word document when opened in LibreOffice (w:sdt) - 706792: PTF 3.3.1-21 introduced a crash when opening a pptx presentation. - 707486: Macro from excel fails on Selection.Copy when run in Calc. - 707779: Disappearing text - 708137: xls spreadsheet is extremely slow to open and check boxes are broken. - 708518: Bullet symbol is not rendered correctly in a specific slide. - 710061: ODP export to PDF produces broken images - 710920: RPM installation ending with redundant error. - 711977: File association for fod* files are missing. - 712358: Some extensions broken after upgrading. - 715268: Command libreoffice --help does not work when LibreOffice is already started - 715416: Impress crashes starting Slide show in the context of dual monitors extension mode. - 715931: failed to save an odp file. last seen 2020-06-01 modified 2020-06-02 plugin id 57219 published 2011-12-13 reporter This script is Copyright (C) 2011-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/57219 title SuSE 10 Security Update : libreoffice (ZYPP Patch Number 7791) NASL family SuSE Local Security Checks NASL id SUSE_11_LIBREOFFICE-34-111012.NASL description LibreOffice 3.4 includes new interesting features and fixes, see http://www.libreoffice.org/download/3-4-new-features-and-fixes/ The update fixes the following security issue : - 704311: libreoffice Lotus Word Pro filter multiple vulnerabilities. (CVE-2011-2685) - 722075: LibreOffice: Out-of-bounds read in DOC sprm (CVE-2011-2713) This update also fixes the following non-security issues : - 653519: Welcome screen missing. - 653662: libreoffice build calls mkbundle2 (deprecated) instead of mkbundle - 663622: Writer crash during document save - 675868: eliminate wording of ooconvert existed in loconvert --help - 675961: Libreoffice Copy paste of formula in Writer tables does not work as expected - 676858: Document with full page graphic in header will not allow click-drag or right-click. - 677354: The languagetool.rpm does not work as expected - 678998: Libre Office does not detect KDE3 - 680272: Deleting multiple sheets results in run-time error/crash - 681738: DDE link is lost when .xls file is opened/saved in Calc. - 683578: Large xlsx file takes extremely long to open with Libreoffice calc - 684784: Microsoft Office spreadsheet does not display anything - 693238: Column format in docx file is not displayed correctly. - 693477: Format of Word .doc file from HP is bad. - 694119: Using File-->Send-->Document as E-mail will crash Impress - 694344: 3rd level bulleted items are not displayed properly. - 695479: RTF file is not displayed correctly by Writer. - 696630: DDE link from Calc to Excel needs Excel open to update link in Calc. - 699334: Presentation created in MS Office is missing text when opened in LibreOffice - 701317: xls spreadsheet macro fails with LibreOffice. - 702506: Writer crashes when opening docx files. - 704639: HTML document appearance changes when opened in open office vs LibreOffice - 704642: 16 digit numbers change in LibreOffice when opening a file created in MS Excel - 705949: Information missing from MS Word document when opened in LibreOffice (w:sdt) - 706792: crash when opening a pptx presentation. - 707486: Macro from excel fails on Selection.Copy when run in Calc. - 707779: Disappearing text - 708137: xls spreadsheet is extremely slow to open and check boxes are broken. - 708518: Bullet symbol is not rendered correctly in a specific slide. - 710061: ODP export to PDF produces broken images - 710920: RPM installation ending with redundant error. - 711977: File association for fod* files are missing. - 712358: Some extensions broken after upgrading. - 715268: Command libreoffice --help does not work when LibreOffice is already started - 715416: Impress crashes starting Slide show in the context of dual monitors extension mode. - 715931: failed to save an odp file. - 717262: libtool adds /usr/lib64 into rpath - 715856: LibreOffice:Stable/libreoffice-converter: Bug - 677354: The languagetool.rpm does not work as expected. - 693200: Documents created in MS Office cause LibreOffice to crash - 693386: Documents created in MS Office bring up the filter selection dialog when opened with LibreOffice - 693427: When using QT dialogs and not LibreOffice dialogs causes LibreOffice to hang when attempting to save a document - 706731: VBA Macros from MS Office Spreadsheet do not work correct with LibreOffice 3.3.1 last seen 2020-06-01 modified 2020-06-02 plugin id 57118 published 2011-12-13 reporter This script is Copyright (C) 2011-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/57118 title SuSE 11.1 Security Update : LibreOffice (SAT Patch Number 5271) NASL family Fedora Local Security Checks NASL id FEDORA_2011-14036.NASL description Update for LibreOffice to handle parsing invalid .doc property lists Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 56546 published 2011-10-19 reporter This script is Copyright (C) 2011-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/56546 title Fedora 15 : libreoffice-3.3.3.1-7.fc15 (2011-14036) NASL family SuSE Local Security Checks NASL id SUSE_11_3_LIBREOFFICE-34-111007.NASL description LibreOffice 3.4 includes new interesting features and fixes, see http://www.libreoffice.org/download/3-4-new-features-and-fix es/ The update fixes the following security issue : - 704311: libreoffice Lotus Word Pro filter multiple vulnerabilities (CVE-2011-2685) - 722075: LibreOffice: Out-of-bounds read in DOC sprm (CVE-2011-2713) This update also fixes the following non-security issues : - 647959: LibO has a regression problem to show emf charts properly. - 650049: pptx presentation has text in boxes and circles. Only text is displayed. - 651250: Video and Audio does not play in slide show mode of LibO Impress. - 652562: LibreOffice crashes on start on 11.4-MS3 NET/DVD install - 653662: libreoffice build calls mkbundle2 (deprecated) instead of mkbundle - 663622: Writer crash during document save - 665112: could not type or edit office document - 675868: eliminate wording of ooconvert existed in loconvert --help - 675961: Libreoffice Copy paste of formula in Writer tables does not work as expected - 676858: Document with full page graphic in header will not allow click-drag or right-click. - 678998: Libre Office 3.3.1 does not detect KDE3 - 680272: Deleting multiple sheets results in run-time error/crash - 681738: DDE link is lost when .xls file is opened/saved in Calc. - 683578: Large xlsx file takes extremely long to open with Libreoffice calc - 684784: Microsoft Office spreadsheet does not display anything - 693238: Column format in docx file is not displayed correctly. - 693477: Format of Word .doc file from HP is bad. - 694119: Using File-->Send-->Document as E-mail will crash Impress - 694344: 3rd level bulleted items are not displayed properly. - 695479: L3: RTF file is not displayed correctly by Writer. - 696630: DDE link from Calc to Excel needs Excel open to update link in Calc. - 702506: Writer crashes when opening docx files. - 704639: HTML document appearance changes when opened in open office vs LibreOffice - 704642: 16 digit numbers change in LibreOffice when opening a file created in MS Excel - 705949: Information missing from MS Word document when opened in LibreOffice (w:sdt) - 706792: PTF 3.3.1-21 introduced a crash when opening a pptx presentation. - 707486: Macro from excel fails on Selection.Copy when run in Calc. - 707779: Disappearing text - 708137: xls spreadsheet is extremely slow to open and check boxes are broken. - 708518: Bullet symbol is not rendered correctly in a specific slide. - 710061: ODP export to PDF produces broken images - 710920: RPM installation ending with redundant error. - 711977: File association for fod* files are missing. - 712358: Some extensions broken after upgrading. - 715268: Command libreoffice --help does not work when LibreOffice is already started - 715856: LibreOffice:Stable/libreoffice-converter: Bug - 715416: Impress crashes starting Slide show in the context of dual monitors extension mode. - 715931: failed to save an odp file. - 717262: libtool adds /usr/lib64 into rpath last seen 2020-06-01 modified 2020-06-02 plugin id 75611 published 2014-06-13 reporter This script is Copyright (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/75611 title openSUSE Security Update : libreoffice-34 (openSUSE-SU-2011:1143-1)
Seebug
| bulletinFamily | exploit |
| description | BUGTRAQ ID: 49969 CVE ID: CVE-2011-2713 OpenOffice原是Sun公司的一套商业级Office软件－StarOffice，经过Sun公司公开程序码之后，正式命名为OpenOffice发展计划。 OpenOffice.org的二进制.doc文件格式输入程序在实现上存在多个漏洞，目前技术细节不明。 Debian Linux 6.0 x OpenOffice OpenOffice < 3.2.1 厂商补丁： OpenOffice ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.openoffice.org/ |
| id | SSV:23114 |
| last seen | 2017-11-19 |
| modified | 2011-10-21 |
| published | 2011-10-21 |
| reporter | Root |
| title | OpenOffice Microsoft Word文件格式输入程序多个安全漏洞 |
References
- http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068160.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068198.html
- http://lists.opensuse.org/opensuse-updates/2011-10/msg00019.html
- http://osvdb.org/76178
- http://secunia.com/advisories/50692
- http://secunia.com/advisories/60799
- http://security.gentoo.org/glsa/glsa-201209-05.xml
- http://www.debian.org/security/2011/dsa-2315
- http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml
- http://www.libreoffice.org/advisories/CVE-2011-2713/
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:172
- http://www.securityfocus.com/bid/49969
- http://www.securitytracker.com/id?1026145
- https://bugzilla.redhat.com/show_bug.cgi?id=725668