OpenOffice

[brainslicer]

OpenOffice Database Document Processing Unspecified Code Execution

- Highly critical - From remote

Issued 1 day ago.

 

Description:

A vulnerability has been reported in OpenOffice, which potentially can be exploited by malicious people to compromise a user's system.

 

The vulnerability is caused due to an unspecified error in the HSQLDB database engine and can be exploited to execute arbitrary static Java code via a specially crafted database document.

 

The vulnerability is reported in versions prior to version 2.3.1.

 

Solution:

Update to version 2.3.1 (HSQLDB 1.8.0.9).

http://download.openoffice.org/index.html