You are here: silicon.com > Software > Security Strategy

Security Strategy

OpenOffice tackles "highly critical" hole

Urges users to patch or upgrade...

Tags: openoffice

By Richard Thurston

Published: 8 January 2007 10:32 GMT

OpenOffice.org has patched a critical vulnerability in the open source application suite.

The vulnerability concerns the way OpenOffice handles '.wmf' images. Exploitation of the vulnerability, which affects all but the newest version of OpenOffice, can enable a hacker to perform a buffer overflow and then introduce malicious code to the victim's PC.

Security advisor Secunia rates the vulnerability as "highly critical", and has urged users to patch their systems.

OpenOffice has uploaded the patch to its website. Users must manually install the file in place of its vulnerable predecessor, or upgrade to the latest version of the software, OpenOffice 2.1. Open source suppliers such as Red Hat have followed suit by releasing their own patches.

OpenOffice has become increasingly popular as a free alternative to Microsoft's Office suite. It contains all the standard business applications, including word processing, database and spreadsheet programmes.

Although this is the first '.wmf' vulnerability to hit OpenOffice, such flaws have previously affected Windows.

In early 2006, Microsoft acknowledged a critical weakness in the way Windows renders '.wmf' files, leading to the company releasing patches out of cycle. The UK parliament was attacked at the time using the vulnerability.

Richard Thurston writes for ZDNet UK

  1. Zones
  2. Management
  3. Networks
  4. Software
  5. IT Services
  6. Hardware
  1. Verticals
  2. Public Sector
  3. Financial Services
  4. Retail & Leisure

  • Jobs
Systems Engineer, Windows 2003 / Cisco / Linux / VMWare- Oxfordshire

Unix, Red Hat, Mandrake, SUSE, Solaris, HP-UX, Cisco, Cisco IOS, Router, Firewall, PIX, Firewall 1, TCP/IP, DNS, DHCP, proxy, email, MS Exchange, ...

IT Support Engineer

Further job specification and full details of our benefits package, can be found at our website below. Farnborough College of Technology is a mixed ...

Security Consultant Ethical Hacking / Penetration Testing - London

Responsibilities: - Deliver security assessment services including network scanning, vulnerability testing, penetration testing, search engine ...

CIO50 2008
The silicon.com CIO50 2008 profiles the most influential and innovative tech chiefs in the UK across all industries and organisation size, from the biggest FTSE100 companies to high growth dot-com start ups and the public sector. The list was voted on by the UK CIO community and a panel of experts. Find out more in our latest special report.





Quick Sitemap Links: