|| ||Dirk Mueller <mueller-AT-kde.org>|
|| ||[kde-announce] [KOffice security advisory] KOffice OLEfilter
|| ||Tue, 5 Dec 2006 11:49:11 +0100|
KOffice Security Advisory: KOffice olefilters integer overflow
Original Release Date: 2006-12-04
1. Systems affected:
KOffice 1.4.x and 1.6.0. 1.5.x releases are unaffected as well
as 1.6.1 or newer.
The OLE import filter, which is used in KPresenter to open Microsoft
Powerpoint files is vulnerable to an integer overflow problem that
can be exploited to expose an heap memory overflow. This
issue was reported by Kees Cook from Ubuntu security.
A maliciously crafted file can cause to execute arbitrary code.
Source code patches have been made available which fix these
vulnerabilities. Contact your OS vendor / binary package provider
fo information about how to obtain updated binary packages.
A patch for KOffice 1.4.0 - KOffice 1.6.0 is available from
kde-announce mailing list
to post comments)