sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Re: [SM-Security] [Full-disclosure] [ GLSA 200504-13 ] OpenOffice.Org: DOC document Heap Overflow

From: Thomas Houssin <thomas.houssin AT gmail.com>
To: sm-security AT lists.ibiblio.org
Subject: Re: [SM-Security] [Full-disclosure] [ GLSA 200504-13 ] OpenOffice.Org: DOC document Heap Overflow
Date: Sun, 17 Apr 2005 17:23:31 +0200

Andrew wrote:
> We have 1.1.4, not sure if thats newer or older than this 1.1.4-r1 release.
>
<snip>

Patch applied in devel, test and stable.

The spell openoffice-bin is attached, can someone with z-rejected access
integrate it ?

The file vul3.doc (found on
http://www.openoffice.org/issues/show_bug.cgi?id=46388) will crash
openoffice if vulnerable.

--
Thomas Houssin

Key ID = 42404C36
Key fingerprint = 3CB8 3FC4 840D B272 E623 BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36

"There is no such thing as a moral or an immoral book. Books are well
written, or badly written. That is all."
Oscar Wilde.

Attachment: vul3.doc
Description: Binary data

Attachment: openoffice-bin.tar.bz2
Description: application/bzip

Attachment: signature.asc
Description: OpenPGP digital signature

[SM-Security] [Full-disclosure] [ GLSA 200504-13 ] OpenOffice.Org: DOC document Heap Overflow, Andrew, 04/15/2005
- Re: [SM-Security] [Full-disclosure] [ GLSA 200504-13 ] OpenOffice.Org: DOC document Heap Overflow, Thomas Houssin, 04/17/2005
  - Re: [SM-Security] [Full-disclosure] [ GLSA 200504-13 ] OpenOffice.Org: DOC document Heap Overflow, Andrew, 04/17/2005
    - Re: [SM-Security] [Full-disclosure] [ GLSA 200504-13 ] OpenOffice.Org: DOC document Heap Overflow, Thomas Houssin, 04/17/2005