Two weeks after main sponsor Red Hat plugged the same hole
vnunet.com, 05 Oct 2007
Fedora has fixed a 'highly critical' flaw in the OpenOffice suite of products more than two weeks after it was first discovered.
The vulnerability was announced on the Secunia security website on 18 September and Red Hat provided a fix on the same day for its Enterprise Linux products.
However, an update to fix the problem in the free Fedora Linux has only just been released, despite Red Hat being its main sponsor.
The OpenOffice vulnerability is caused by integer overflows when processing certain tags within Tiff images.
The problem could be exploited to cause heap-based buffer overflows, possibly by tricking a user into opening a specially crafted document.
Successful exploitation could allow the execution of arbitrary code and compromise a user's system.
OpenOffice is a free office productivity suite that includes a word processor, spreadsheet, presentation manager, formula editor and drawing program.
Show us the patents
Nearly on a par with commercial software, finds survey
How web services contribute to data headaches
Remote access - Three steps to getting connected
3.4 million UK professionals now work from home – is your company equipped?
Cost benefits of a global collaboration network
This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications
Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.
Chris Adams, Office Client product manager for Microsoft UK, explains...
Critics says government proposals to curb illegal downloading are unworkable...
Do you agree?
Have your say on this article