Soluções para vulnerabilidades

O Exame Periódico de Vulnerabilidade do Nimsoft Cloud Monitor verifica a vulnerabilidade abaixo. Para ver as soluções para vulneralidades adicionadas mais recentemente que são examinadas pelo WatchMouse, acesse a visão geral das Soluções para vulnerabilidades

Categoria: SuSE Local Security Checks Fator de risco: High Adicionado: 18 Mar 2010
Synopsis:

The remote SuSE system is missing a security patch for OpenOffice_org

Description:

This update of OpenOffice_org includes fixes for the following vulnerabilities:
- CVE-2009-0217: XML signature weakness - CVE-2009-2949: XPM Import Integer Overflow - CVE-2009-2950: GIF Import Heap Overflow - CVE-2009-3301: MS Word sprmTDefTable Memory Corruption - CVE-2009-3302: MS Word sprmTDefTable Memory Corruption - CVE-2010-0136: In the ooo-build variant of OpenOffice_org VBA Macro support does not honor Macro security settings.

See also:

https://bugzilla.novell.com/show_bug.cgi?id=564497
https://bugzilla.novell.com/show_bug.cgi?id=564503
https://bugzilla.novell.com/show_bug.cgi?id=566030
https://bugzilla.novell.com/show_bug.cgi?id=521564
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2949
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2950
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0136
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3301
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3302
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0217

Solution:

Run yast to install the security patch for OpenOffice_org

Risk factor:

High / CVSS Base Score : 9.3
(CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C)