bugtraq - [ MDKSA-2006:222 ] - Updated koffice packages fixes integer overflow vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-Id: <E1GqFjl-00086y-SZ@mercury.mandriva.com>
Date: Fri,  1 Dec 2006 14:16:01 -0700
From: security@...driva.com
To: bugtraq@...urityfocus.com
Subject: [ MDKSA-2006:222 ] - Updated koffice packages fixes integer overflow vulnerability


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________
 
 Mandriva Linux Security Advisory                         MDKSA-2006:222
 http://www.mandriva.com/security/
 _______________________________________________________________________
 
 Package : koffice
 Date    : December 1, 2006
 Affected: 2007.0
 _______________________________________________________________________
 
 Problem Description:
 
 An integer overflow was discovered in KOffice's filtering code.  By
 tricking a user into opening a specially crafted PPT file, attackers
 could crash KOffice or possibly execute arbitrary code with the user's
 privileges.

 The updated packages have been patched to correct this issue.
 _______________________________________________________________________

 References:
 
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6120
 _______________________________________________________________________
 
 Updated Packages:
 
 Mandriva Linux 2007.0:
 97ad85cf8411c6ff5de87a62aab94a35  2007.0/i586/koffice-1.5.91-3.2mdv2007.0.i586.rpm
 db50d5559832bbb2dbb2c411184d134f  2007.0/i586/koffice-karbon-1.5.91-3.2mdv2007.0.i586.rpm
 7c748642ea280486ccc9ad1164924ec6  2007.0/i586/koffice-kexi-1.5.91-3.2mdv2007.0.i586.rpm
 6c5a63dc9354f8b1215adc7512c08685  2007.0/i586/koffice-kformula-1.5.91-3.2mdv2007.0.i586.rpm
 78f0e4824c86b6c3f43c4d1e9a5b792a  2007.0/i586/koffice-kivio-1.5.91-3.2mdv2007.0.i586.rpm
 8c9a702ef82928900043eef81702df35  2007.0/i586/koffice-koshell-1.5.91-3.2mdv2007.0.i586.rpm
 20556ba10c0a5e67da7577077df62312  2007.0/i586/koffice-kplato-1.5.91-3.2mdv2007.0.i586.rpm
 b3319fcc35d5a7d370698196ec75ff92  2007.0/i586/koffice-kpresenter-1.5.91-3.2mdv2007.0.i586.rpm
 be36984a365fc1e4fbc7b28b931b1bf3  2007.0/i586/koffice-krita-1.5.91-3.2mdv2007.0.i586.rpm
 5af60bc6e42cd6489ad018dba76b06a2  2007.0/i586/koffice-kspread-1.5.91-3.2mdv2007.0.i586.rpm
 24d4813bee6f2b5814972554d1e6d5ca  2007.0/i586/koffice-kugar-1.5.91-3.2mdv2007.0.i586.rpm
 6fae99addb4c1093aa04de1c0e59c97e  2007.0/i586/koffice-kword-1.5.91-3.2mdv2007.0.i586.rpm
 7ae26f275efedce5d44d79f392f0bb58  2007.0/i586/koffice-progs-1.5.91-3.2mdv2007.0.i586.rpm
 3483943311cd9d80368fe3d08f58c371  2007.0/i586/libkoffice2-karbon-1.5.91-3.2mdv2007.0.i586.rpm
 597101df425c25e7dd98c9fe9bf17e07  2007.0/i586/libkoffice2-karbon-devel-1.5.91-3.2mdv2007.0.i586.rpm
 57e233c194e554e8704d4c32b788a76c  2007.0/i586/libkoffice2-kexi-1.5.91-3.2mdv2007.0.i586.rpm
 2c4c98f62b419e63c0ef65979321deda  2007.0/i586/libkoffice2-kexi-devel-1.5.91-3.2mdv2007.0.i586.rpm
 a71985bc483afedf378415adce427a06  2007.0/i586/libkoffice2-kformula-1.5.91-3.2mdv2007.0.i586.rpm
 994e26bb97eac10fdd2e09cca64b87a9  2007.0/i586/libkoffice2-kformula-devel-1.5.91-3.2mdv2007.0.i586.rpm
 4c41e347712800078a820306a98a26c8  2007.0/i586/libkoffice2-kivio-1.5.91-3.2mdv2007.0.i586.rpm
 000ae5e267e281e764b95dccb9c4b84e  2007.0/i586/libkoffice2-kivio-devel-1.5.91-3.2mdv2007.0.i586.rpm
 f23734cbd98541eecdeb258c0732fc1a  2007.0/i586/libkoffice2-koshell-1.5.91-3.2mdv2007.0.i586.rpm
 dc638d9155717c2c4091b9da2e55144c  2007.0/i586/libkoffice2-kplato-1.5.91-3.2mdv2007.0.i586.rpm
 f6d05ae189da6de29cc0c69afab5027b  2007.0/i586/libkoffice2-kpresenter-1.5.91-3.2mdv2007.0.i586.rpm
 87d31c59a56729a2f4e9bddc36ea8c32  2007.0/i586/libkoffice2-kpresenter-devel-1.5.91-3.2mdv2007.0.i586.rpm
 2fd250793b43f2bb2255d97859f886d2  2007.0/i586/libkoffice2-krita-1.5.91-3.2mdv2007.0.i586.rpm
 6c383e3918558aded1e61ddfdadb7273  2007.0/i586/libkoffice2-krita-devel-1.5.91-3.2mdv2007.0.i586.rpm
 51ed465cb0c6ee89975aec7f1262ab66  2007.0/i586/libkoffice2-kspread-1.5.91-3.2mdv2007.0.i586.rpm
 0663f72f3a1bdce3672899a469d6972b  2007.0/i586/libkoffice2-kspread-devel-1.5.91-3.2mdv2007.0.i586.rpm
 04dce49f0d17bdd14716d53ea8e1da0f  2007.0/i586/libkoffice2-kugar-1.5.91-3.2mdv2007.0.i586.rpm
 70816b062ed237a79478e3c248922cdd  2007.0/i586/libkoffice2-kugar-devel-1.5.91-3.2mdv2007.0.i586.rpm
 a8e1d9c67a02b6910defc0e09b4716f7  2007.0/i586/libkoffice2-kword-1.5.91-3.2mdv2007.0.i586.rpm
 dd88904044b5103407fda7c1a2e53fde  2007.0/i586/libkoffice2-kword-devel-1.5.91-3.2mdv2007.0.i586.rpm
 8619b90e23e355b545230c6a9fbf5cd2  2007.0/i586/libkoffice2-progs-1.5.91-3.2mdv2007.0.i586.rpm
 8c4e1ccdfe2b69d66739aa04c09b4eae  2007.0/i586/libkoffice2-progs-devel-1.5.91-3.2mdv2007.0.i586.rpm 
 18f79118122cdc73e54dfec4d9365091  2007.0/SRPMS/koffice-1.5.91-3.2mdv2007.0.src.rpm

 Mandriva Linux 2007.0/X86_64:
 0d4734623788de46f16fb9866362fb60  2007.0/x86_64/koffice-1.5.91-3.2mdv2007.0.x86_64.rpm
 6e9294e503e496542c867c9f62298731  2007.0/x86_64/koffice-karbon-1.5.91-3.2mdv2007.0.x86_64.rpm
 65907aa84ed619962aa87599ea5c922c  2007.0/x86_64/koffice-kexi-1.5.91-3.2mdv2007.0.x86_64.rpm
 db489203dc559d631df6cfc7fafe93cd  2007.0/x86_64/koffice-kformula-1.5.91-3.2mdv2007.0.x86_64.rpm
 1500fb9ee551eaee484254cb2424e57a  2007.0/x86_64/koffice-kivio-1.5.91-3.2mdv2007.0.x86_64.rpm
 9555a5d61aa1132196ab53474d86e3b5  2007.0/x86_64/koffice-koshell-1.5.91-3.2mdv2007.0.x86_64.rpm
 b2315a4e783d8482d56ee0723e5a9b0e  2007.0/x86_64/koffice-kplato-1.5.91-3.2mdv2007.0.x86_64.rpm
 c742e5bbef3f868d538cfd65ee581623  2007.0/x86_64/koffice-kpresenter-1.5.91-3.2mdv2007.0.x86_64.rpm
 9bb89a8140594af37cb5533039f8b8b1  2007.0/x86_64/koffice-krita-1.5.91-3.2mdv2007.0.x86_64.rpm
 20702a2f45aa65bf5fd71034c379d877  2007.0/x86_64/koffice-kspread-1.5.91-3.2mdv2007.0.x86_64.rpm
 ba4d9249380cb17d86f1cc20b15a6da0  2007.0/x86_64/koffice-kugar-1.5.91-3.2mdv2007.0.x86_64.rpm
 96a772d36130780a92a0d14a51b82173  2007.0/x86_64/koffice-kword-1.5.91-3.2mdv2007.0.x86_64.rpm
 3ef642a955a0de9f4440a9b7f5ed112d  2007.0/x86_64/koffice-progs-1.5.91-3.2mdv2007.0.x86_64.rpm
 90aefb67aefcc6c70e3f0acafdf2d20a  2007.0/x86_64/lib64koffice2-karbon-1.5.91-3.2mdv2007.0.x86_64.rpm
 d99922c80f817fe39778f6711cc48a24  2007.0/x86_64/lib64koffice2-karbon-devel-1.5.91-3.2mdv2007.0.x86_64.rpm
 d1ce54c1da5baf6e5d78f6dbb9df2e88  2007.0/x86_64/lib64koffice2-kexi-1.5.91-3.2mdv2007.0.x86_64.rpm
 5b5ab70a073c52d1866f8f0504d696d8  2007.0/x86_64/lib64koffice2-kexi-devel-1.5.91-3.2mdv2007.0.x86_64.rpm
 b27623062be6e6c56afab8d64215eda4  2007.0/x86_64/lib64koffice2-kformula-1.5.91-3.2mdv2007.0.x86_64.rpm
 c9d45dfb4c71793c6a04772da52a4c27  2007.0/x86_64/lib64koffice2-kformula-devel-1.5.91-3.2mdv2007.0.x86_64.rpm
 c541021dfc624c5b01a2994d3e62354b  2007.0/x86_64/lib64koffice2-kivio-1.5.91-3.2mdv2007.0.x86_64.rpm
 78fbf699ce7bd245f7ffcce694488bd8  2007.0/x86_64/lib64koffice2-kivio-devel-1.5.91-3.2mdv2007.0.x86_64.rpm
 bc14a92c9079f26509110d8dcfef4234  2007.0/x86_64/lib64koffice2-koshell-1.5.91-3.2mdv2007.0.x86_64.rpm
 04df83ce95051488ba0165e02a647438  2007.0/x86_64/lib64koffice2-kplato-1.5.91-3.2mdv2007.0.x86_64.rpm
 8bcc5137ccf41bba147986de8d8b95e4  2007.0/x86_64/lib64koffice2-kpresenter-1.5.91-3.2mdv2007.0.x86_64.rpm
 9157afe6ed8b9f4745cd7f0333ac484f  2007.0/x86_64/lib64koffice2-kpresenter-devel-1.5.91-3.2mdv2007.0.x86_64.rpm
 9edddd073414539f674939a95412ea9e  2007.0/x86_64/lib64koffice2-krita-1.5.91-3.2mdv2007.0.x86_64.rpm
 4e54205509fe323caaaecab61acb2e20  2007.0/x86_64/lib64koffice2-krita-devel-1.5.91-3.2mdv2007.0.x86_64.rpm
 8149704298a9bfe1edcd903b73536654  2007.0/x86_64/lib64koffice2-kspread-1.5.91-3.2mdv2007.0.x86_64.rpm
 ed82f407c7be218dba128252b4de09f3  2007.0/x86_64/lib64koffice2-kspread-devel-1.5.91-3.2mdv2007.0.x86_64.rpm
 62a023ac8bb89806a0080797f6f9a03f  2007.0/x86_64/lib64koffice2-kugar-1.5.91-3.2mdv2007.0.x86_64.rpm
 0479922c3466a2f4ba2c5079d55fe634  2007.0/x86_64/lib64koffice2-kugar-devel-1.5.91-3.2mdv2007.0.x86_64.rpm
 7039997ba59f0e670e8f1352c0c82711  2007.0/x86_64/lib64koffice2-kword-1.5.91-3.2mdv2007.0.x86_64.rpm
 aed8cd41144d076f9ee51b6cd0966a51  2007.0/x86_64/lib64koffice2-kword-devel-1.5.91-3.2mdv2007.0.x86_64.rpm
 aacf502f62097c102dc44be1387763d7  2007.0/x86_64/lib64koffice2-progs-1.5.91-3.2mdv2007.0.x86_64.rpm
 d30e35e35d4e4832f78a61e116114a33  2007.0/x86_64/lib64koffice2-progs-devel-1.5.91-3.2mdv2007.0.x86_64.rpm 
 18f79118122cdc73e54dfec4d9365091  2007.0/SRPMS/koffice-1.5.91-3.2mdv2007.0.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFFcHEwmqjQ0CJFipgRAmRsAJ9maSoEYLobFpNgiMarEgFpcFVQwgCdETbx
BpC/9xb5tzUEDiL6MwB8IXQ=
=Popd
-----END PGP SIGNATURE-----