All the latest UK technology news, reviews and analysis
|
|
|
29 Jun 2007
Linus firm SuSE has fixed a flaw in the OpenOffice.org suite of programs more than two weeks after it was discovered.
The update released today fixes a vulnerability found on 12 June that could be exploited by malicious attackers to compromise a user's system.
The attack uses specially crafted RTF files with a 'prtdata' tag that has a length parameter inconsistency, causing vtable entries to be overwritten.
This could cause a heap-based buffer overflow in OpenOffice.org 2.2.1 and earlier versions and allow remote attackers to execute arbitrary code.
Secunia rated the flaw, which affects openSuse 10.2, SuSE Linux 10, SuSE Linux 10.1 and SuSE Linux Desktop 1.x, as 'highly critical'.
Sun Microsystems warned that users affected by the attack would not be aware of it.
"There are no predictable symptoms that would indicate that this issue has occurred," said a Sun security briefing.
The flaw was brought to light by John Heasman of NGS Software.
Latest stories from Open Source
Related articles
Related jobs
Poll
Are you confident that the UK's IT infrastructure is secure from attack in the wake of the Flame malware revelations?
Orange and Intel talk us through the ins and outs of their San Diego smartphone
Connect with V3.co.uk
The wrong printers, for the wrong tasks on the wrong contracts
Who leads the BI pack and who should we be watching out for?
BUSINESS SYSTEMS DIRECTOR (You will ideally have worked...
Application Production Engineer - Application Engineer...
C#/ C++ * Software Engineer* 3D Graphics skills - Global...
Senior Low Latency Consultant, Low Latency Project Management...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?