OSVDB ID: 32610

Title: OpenOffice.org (OOo) wmf/winwmf.cxx WMF META_ESCAPE Record Parsing Overflow

Info

Disclosure

Jan 04, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Attack Type: Input Manipulation
Impact: Loss of Integrity
Disclosure: Vendor Verified

Solution

Products

Unknown or Incomplete

References

CVE ID: 2006-5870 (see also: NVD)
Secunia Advisory ID: 23549 23612 23616 23620 23682 23683 23711 23712 23762 23920
SCIP VulDB ID: 2795
Related OSVDB ID: 32611
VUPEN Advisory: ADV-2007-0031 ADV-2007-0059
Other Advisory URL: ftp://patches.sgi.com/support/free/security/advisories/20070101-01-P.asc http://fedoranews.org/cms/node/2343
http://lists.suse.com/archive/suse-security-announce/2007-Jan/0001.html
http://www.debian.org/security/2007/dsa-1246
http://www.gentoo.org/security/en/glsa/glsa-200701-07.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:006
http://www.openoffice.org/issues/show_bug.cgi?id=70042
https://issues.rpath.com/browse/RPL-905
https://lists.ubuntu.com/archives/ubuntu-security-announce/2007-January/000465.html
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-01/0121.html
http://archives.neohapsis.com/archives/vulnwatch/2007-q1/0002.html
http://www.linuxbox.org/pipermail/funsec/2007-January/010889.html
Vendor Specific News/Changelog Entry: http://www.openoffice.org/issues/show_bug.cgi?id=70042
RedHat RHSA: RHSA-2007:0001

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/32610