Test ID:	1.3.6.1.4.1.25623.1.0.881465
Category:	CentOS Local Security Checks
Title:	CentOS Update for openoffice.org-base CESA-2012:1136 centos5
Summary:	The remote host is missing an update for the 'openoffice.org-base'; package(s) announced via the referenced advisory.
Description:	Summary: The remote host is missing an update for the 'openoffice.org-base' package(s) announced via the referenced advisory. Vulnerability Insight: OpenOffice.org is an office productivity suite that includes desktop applications, such as a word processor, spreadsheet application, presentation manager, formula editor, and a drawing program. Multiple heap-based buffer overflow flaws were found in the way OpenOffice.org processed encryption information in the manifest files of OpenDocument Format files. An attacker could provide a specially-crafted OpenDocument Format file that, when opened in an OpenOffice.org application, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2012-2665) Upstream acknowledges Timo Warns as the original reporter of these issues. All OpenOffice.org users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. All running instances of OpenOffice.org applications must be restarted for this update to take effect. Affected Software/OS: openoffice.org-base on CentOS 5 Solution: Please install the updated packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2665 BugTraq ID: 54769 http://www.securityfocus.com/bid/54769 Debian Security Information: DSA-2520 (Google Search) http://www.debian.org/security/2012/dsa-2520 http://security.gentoo.org/glsa/glsa-201209-05.xml http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml http://www.pre-cert.de/advisories/PRE-SA-2012-05.txt https://bugzilla.redhat.com/show_bug.cgi?id=826077 RedHat Security Advisories: RHSA-2012:1135 http://rhn.redhat.com/errata/RHSA-2012-1135.html http://www.securitytracker.com/id?1027331 http://www.securitytracker.com/id?1027332 http://secunia.com/advisories/50142 http://secunia.com/advisories/50146 http://secunia.com/advisories/50692 http://secunia.com/advisories/60799 http://www.ubuntu.com/usn/USN-1536-1 http://www.ubuntu.com/usn/USN-1537-1
Copyright	Copyright (c) 2012 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.