OpenOffice_org OpenOffice_org: Security fix for Macro execution problem. OpenOffice_org: Sicherheitsupdate für automatisches Ausführen von Macros. Following security problems were found in OpenOffice_org: - CVE-2006-2198: A security vulnerability in OpenOffice.org may make it possible to inject basic code into documents which is executed upon loading of the document. The user will not be asked or notified and the macro will have full access to system resources with current user's privileges. As a result, the macro may delete/replace system files, read/send private data and/or cause additional security issues. Note that this attack works even with Macro execution disabled. This attack allows remote attackers to modify files / execute code as the user opening the document. - CVE-2006-2199: A security vulnerability related to OpenOffice.org documents may allow certain Java applets to break through the "sandbox" and therefore have full access to system resources with current user privileges. The offending Applets may be constructed to destroy/replace system files, read or send private data, and/or cause additional security issues. Since Java applet support is only there for historical reasons, as StarOffice was providing browser support, the support has nown been disabled by default. - CVE-2006-3117: A buffer overflow in the XML utf8 converter allows for a value to be written to an arbitrary location in memory. This may lead to command execution in the context of the current user. Folgende Sicherheitsprobleme werden durch diesen Patch in OpenOffice_org behoben: - CVE-2006-2198: Es ist möglich, Macros so in OpenOffice.org einzubetten, dass sie beim Laden des Dokumentes ausgeführt werden. Dadurch ist es entfernten Angreifern möglich, Code als der OpenOffice.org Benutzer auszuführen, Dateien zu modifizieren und ähnliches. Dies ist auch mit abgeschalteter Macro Unterstützung möglich. - CVE-2006-2199: Ein Sicherheitsproblem in der Java Applet Behandlung in OpenOffice.org Dokumenten erlaubt es diesen Java Applets, aus ihrer Sandbox auszubrechen und Code als der OpenOffice.org Benutzer auszuführen oder dessen Dateien zu modifizieren. Da Java Applet Unterstützung nur noch aus historischen Gründen verfügbar ist, wurde es jetzt als default deaktiviert. - CVE-2006-3117: Ein Pufferüberlauf im XML UTF-8 Konverter erlaubt es entfernten Angreifern, beliebigen Code als der OpenOffice.org Benutzer auszuführen. security OpenOffice_org i586 3eba401e53f8c79fd99400ea1e8da85137f9c2dc OpenOffice_org ppc c7fe13d364e0f23b3cf79c239cba2dae6064df50 OpenOffice_org-af i586 5c0dec3608fe0a601425dc5b3c8f893e61ac9695 OpenOffice_org-af ppc d3acc4e90fde1a7e16798d791364e937d65351aa OpenOffice_org-ar i586 821b4494a845205103f098734bcf4b155d90c35c OpenOffice_org-ar ppc a0061c13b3a918806708a2177e55ae1da7c598ac OpenOffice_org-be-BY i586 c60b5989327ee509a66d2d1324954473f08023c6 OpenOffice_org-be-BY ppc 29525885b5e50145a561203c9688a6ec64ae98e1 OpenOffice_org-bg i586 a6cf7441a2d0ebf761b1e9bc2f8a4806637a9c9f OpenOffice_org-bg ppc 357681561c11dfe54009c14af17ae5cd7e8bf27d OpenOffice_org-ca i586 400e04c06c36ffaf279887938f9fed3f8e80b26b OpenOffice_org-ca ppc ad78244c8c313dac487fd90119b9438a0058f0d1 OpenOffice_org-cs i586 73a116719a6457d981ee1cbef7e27c9cf14a4a3d OpenOffice_org-cs ppc be340c9977c6bb1c7e5d9b34b00235fe9eaef3e2 OpenOffice_org-cy i586 0d95a267c5aacc19205972c0e08e1dbb902cc22e OpenOffice_org-cy ppc 841e9acf932f7437e23668406e5ab3ca82273a4c OpenOffice_org-da i586 cc2de198d3b14113ccdd4173ad1cb572d6adfbde OpenOffice_org-da ppc f30b38f301ca07bda40e764cfbd4f37c101ca17e OpenOffice_org-de i586 e370b462f1c5daee82df0c8300a7a4ae97ea7f54 OpenOffice_org-de ppc d8b437d5f2a65ec432f63750f5e5e46d2972b9e6 OpenOffice_org-el i586 749173277a4e6fbc75288f358401932c6ba38b70 OpenOffice_org-el ppc ce33e060b5d9f30c04f58cd5cb893e340b7ae6b2 OpenOffice_org-en-GB i586 ccc43fb3778c5a99fea33feeb422b7882e7517db OpenOffice_org-en-GB ppc e25867a69608aa3d0c2eceebe3d85dc012233f53 OpenOffice_org-es i586 8e780f253f63b46fc81033848496e67313a7c4dd OpenOffice_org-es ppc 4aa5428729edeeb16520d6961da826f8d1d5e76f OpenOffice_org-et i586 3c39a834e51d7ee20f54084b011370871baf16a9 OpenOffice_org-et ppc 78422a222b5a20692f2f9f7ffceb97079204b140 OpenOffice_org-fi i586 86a4fc3c7fc84f11e98208643baf204aa47f1ee9 OpenOffice_org-fi ppc 5e481a7f889d6ff21d3c93017a9367ac2aec9c85 OpenOffice_org-fr i586 af2c8607db0d7cf28975a75e8fd30b31694a36bf OpenOffice_org-fr ppc 41afac51a32eb66f1b3580f74f12958eff3dec61 OpenOffice_org-galleries i586 d1c9767e8c0699f33884b868a24f449dba6a7b57 OpenOffice_org-galleries ppc 5586545fdee65329d43aea383544a53fc35852f1 OpenOffice_org-gnome i586 e431c41e09147593f78f00b75edf1ca84a80c965 OpenOffice_org-gnome ppc 02558b3bad2c9baac8cd9db41eb7d780f06b4bd5 OpenOffice_org-gu-IN i586 039281a9fb9355e56b921483419a1437337350aa OpenOffice_org-gu-IN ppc be5b2828cc60369e0cc6165e98dc6529186212a3 OpenOffice_org-hi-IN i586 bdb3bef47c55033c4af95cdcaae4a34fac643e75 OpenOffice_org-hi-IN ppc 8b62007da6351719cf8aa2416f307e711bf201b6 OpenOffice_org-hr i586 cdeae738c6864a84986dfa38d222424044adda28 OpenOffice_org-hr ppc 4f21b670bf2672ab212705a80f7cc42317784910 OpenOffice_org-hu i586 8f1981be27bd0bf1566d9b76087a16a9cb90fc2d OpenOffice_org-hu ppc 862c26bea53230c140aab66cfcc433ed57310d9a OpenOffice_org-it i586 234fe40766c3388ab7ce1b7cd18d6aa13861c85c OpenOffice_org-it ppc a14563157010b5a348037dd7d10801d1d830cdd4 OpenOffice_org-ja i586 0d7402972a9ae58cd92888a8992de60fd0ca026f OpenOffice_org-ja ppc 889f8b5ee36e9a059676deb7a3327d610a2592b1 OpenOffice_org-kde i586 01dbc7d45f6963b7d5201917903335dcd2a21868 OpenOffice_org-kde ppc 70130d086d4909787b9050873c2e2abfa9ab73af OpenOffice_org-km i586 7f2310da5c57719220ab2c079afd5714248c5b39 OpenOffice_org-km ppc a13da608462fe2202e6076484acf2b11e1e527de OpenOffice_org-ko i586 af6e7999a2655996e505fcfc39e224acab7b5593 OpenOffice_org-ko ppc d746b7a1749630624af46686df0a6c3d38b949dc OpenOffice_org-lt i586 612208ec636e96acf9f9bef8bc9643a8fe11d38a OpenOffice_org-lt ppc aa6173964dd21e5d50db8288297e345e716a6d25 OpenOffice_org-mk i586 47e0fe2a9f4cb26b40b0058c33ec20c94b32dbd4 OpenOffice_org-mk ppc d66c08bd9230349f433cd2daa6e6993129cc91e4 OpenOffice_org-mono i586 bb2b117ca9d932842cbf2b7dd86971647b702f46 OpenOffice_org-mono ppc 65ab7bf1d43cdce6139b980309da152c70686eb5 OpenOffice_org-nb i586 3295ad0ae5f612ca511c8bcec51e3c0930109762 OpenOffice_org-nb ppc 50a4f83bc2c62d7f6956f43ab38bbb76cc56c003 OpenOffice_org-nl i586 417bda5d850f9f7a8f8597a719e78a47dc14de1f OpenOffice_org-nl ppc fd0a5f1910c88af992717c0a3ae7519a967d27d1 OpenOffice_org-nn i586 e4d464d837b38e64482ae59252ed15a7c626835e OpenOffice_org-nn ppc 76e656b9f4febcf6fa915e193adb7f12c75515bb OpenOffice_org-officebean i586 ff442df9e6dde6184998dcdc8d9640105306696b OpenOffice_org-officebean ppc 65c6bfac9607b323483d833b75805ab40876af9b OpenOffice_org-pa-IN i586 82c5b153e738219a69a1d8ed012b103146481191 OpenOffice_org-pa-IN ppc 7e2120d8e082b2328224d01d59da9c46b2b3e976 OpenOffice_org-pl i586 9c9d9efd9d6472dec477fa0b6ce4e1ba76e4a53f OpenOffice_org-pl ppc 7037fcfddc7b789cf8b5ef5b7a9e051574905c25 OpenOffice_org-pt i586 44d23a8543d8a15c3bdd7b534614ace135f28419 OpenOffice_org-pt ppc 10108d5b4b7c8328f89507b83a1e8da73f243f4e OpenOffice_org-pt-BR i586 9a5bda3ef3f208d31297ffd416605a75fd0ee0a9 OpenOffice_org-pt-BR ppc 1c4d5d348934d46e3a6000664d398d9398f82bf8 OpenOffice_org-ru i586 19bebea8c14990ff2658f7cbb3aa48f34c096595 OpenOffice_org-ru ppc 3063edd4b71bcbeec99033c7b0fb1debdd4ae007 OpenOffice_org-rw i586 5a344a6a9de3e637b65278e30151105bf7a45712 OpenOffice_org-rw ppc c170ec3766ff63dd6e1dc8ddc7b0a89d0a6484f9 OpenOffice_org-sk i586 5b4f0dd08fb4de7a3bf866b6f16216e6bbd88c6d OpenOffice_org-sk ppc 4d98a481f3a8cbee8013dd39911b004c4a20cac5 OpenOffice_org-sl i586 636d13fd51972239e48fdf753ca950609bbd0d95 OpenOffice_org-sl ppc 00f1baaa32eadd27d1ba219c7ac81a4edf8994a8 OpenOffice_org-sr-CS i586 accb58b61c0b8b214007b25b3216f69bcdf1b789 OpenOffice_org-sr-CS ppc b545b34b9dae8bfc20a368f07d677dea6853bee8 OpenOffice_org-st i586 e557f5046482b45d96db9a8712705bedba28fcf7 OpenOffice_org-st ppc da6f2523aafd96acbeb1349b85ae5694c21b18ef OpenOffice_org-sv i586 183373ec8a02e61223e76e099aa37ab137056fa3 OpenOffice_org-sv ppc 38772782fa7c79281a55ecee9b3b60aa5757b886 OpenOffice_org-tr i586 30b9022259592b8e8f922ec2500c1c2094d9e783 OpenOffice_org-tr ppc 20fc9e6b8b80619f5043049083ed3c77f7597f6f OpenOffice_org-ts i586 42e290c8c99fd9179696ca72756c4d5fd1208984 OpenOffice_org-ts ppc 129f5cf24cb3a737d2bb1c0559e789a0594da243 OpenOffice_org-vi i586 362b627937fd674e960e088b9f0600da8d08f5dc OpenOffice_org-vi ppc 7321861d868ee479accc3befbac3cfcee16704f1 OpenOffice_org-xh i586 fee86ae28b57c8142647c0f5b0d8c632a0e29c4e OpenOffice_org-xh ppc 948a2f2806107726286c516e061876edb0b2c33b OpenOffice_org-zh-CN i586 0421a8ba0fa6038876dc59c1a0b76585d21048d0 OpenOffice_org-zh-CN ppc 95c46d6b381e819920a0a3f8f630043c32b6145d OpenOffice_org-zh-TW i586 c1be62e8f2abc5e0fdd317668a3eaab12a7387f6 OpenOffice_org-zh-TW ppc 65ed4434094f9041859910d964da82494fa0fa5d OpenOffice_org-zu i586 61d5ed2f6ea16552563ba1050987cdfc3f8130f6 OpenOffice_org-zu ppc 03538f38e7ac9d033bc2dfb5765fb0b3e20e9d26