Soluzioni per la vulnerabilità

La Scansione Vulnerabilità periodica di Nimsoft Cloud Monitor verifica le vulnerabilità riportate qui sotto. Per visualizzare le soluzioni per la vulnerabilità più recenti scansionate da WatchMouse, visitare la pagina sulla panoramica delle Soluzioni per la vulnerabilità

Categoria: SuSE Local Security Checks Fattore di rischio: High Aggiunto il: 18 mar 2010
Synopsis:

The remote SuSE system is missing a security patch for OpenOffice_org

Description:

This update of OpenOffice_org includes fixes for the following vulnerabilities:
- CVE-2009-0217: XML signature weakness - CVE-2009-2949: XPM Import Integer Overflow - CVE-2009-2950: GIF Import Heap Overflow - CVE-2009-3301: MS Word sprmTDefTable Memory Corruption - CVE-2009-3302: MS Word sprmTDefTable Memory Corruption - CVE-2010-0136: In the ooo-build variant of OpenOffice_org VBA Macro support does not honor Macro security settings.

See also:

https://bugzilla.novell.com/show_bug.cgi?id=564497
https://bugzilla.novell.com/show_bug.cgi?id=564503
https://bugzilla.novell.com/show_bug.cgi?id=566030
https://bugzilla.novell.com/show_bug.cgi?id=521564
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2949
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2950
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0136
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3301
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3302
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0217

Solution:

Run yast to install the security patch for OpenOffice_org

Risk factor:

High / CVSS Base Score : 9.3
(CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C)