OpenOffice hit by 'highly critical' flaw

Problems dealing with Tiff images could allow remote access

Written by Matt Chapman

A 'highly critical' flaw has been discovered in the OpenOffice suite of products that could allow hackers to access a user's system.

The vulnerability is caused by integer overflows when processing certain tags within Tiff images.

This problem could be exploited to cause heap-based buffer overflows, possibly by tricking a user into opening a specially crafted document.

Successful exploitation could allow the execution of arbitrary code and compromise a user's system, according to Secunia, which rated the vulnerability as 'highly critical'.

The vulnerabilities are reported in versions earlier than OpenOffice 2.3 and the problem can be fixed by upgrading to the latest version of the software.

Red Hat has updated its OpenOffice packages to correct the security issue in Red Hat Enterprise Linux versions 3, 4 and 5.

OpenOffice is a free office productivity suite that includes a word processor, spreadsheet, presentation manager, formula editor and drawing program.

Tags:

Further reading

Windows 2000 flaw highlights slow Patch Tuesday

Vista and XP spared from most dangerous vulnerabilities   More...

Apple slips security fix into iTunes update

Software exposes users to remote code execution vulnerability   More...

Security flaw hits MSN Messenger

Vulnerability puts users at risk of arbitrary code execution   More...

Security flaw hits Symantec Enterprise Firewall

Similar issues in Cisco and Checkpoint products, NTA Monitor warns   More...

Related articles

Fedora patches old OpenOffice flaw

Two weeks after main sponsor Red Hat plugged the same hole   More...

Critical flaw hits Yahoo Widgets

Vulnerability could allow attackers to run code   More...

Security flaw hits MSN Messenger

Vulnerability puts users at risk of arbitrary code execution   More...

Kaspersky falls through Online Scanner flaw

Security firm unaware of 'highly critical' vulnerability   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

24 Jul 2008

3.68 MBSpammer jailed, Esquire e-cover, and network passwords More...

23 Jul 2008

2.99 MBSmall time security, official 'spying' requests and a spammer jail break More...

22 Jul 2008

3.22 MBSat-nav crashes, open source security and female gamers More...

Poll

EUROPEAN E-COMMERCE

EUROPEAN E-COMMERCE

Are you happy making an online purchase from another European country?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

Credit card transaction

Credit card fraud rampant in the UK

Attempted frauds go unreported and ignored, analysts claim   More...

Intel

Intel rolls out new embedded line-up

System-on-a-chip offerings promise footprint and power saving   More...

Advertisement

Network cables

Tech giants collaborate on wireless HD

Another attempt at cable-free transmission in the home   More...

iPhone fever fills AT&T coffers

US provider cashes in on Apple smartphone   More...

Advertisement