bugtraq - Re: [VulnWatch] High Risk Vulnerability in the OpenOffice and StarOffice Suites

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <871wmawlzn.fsf@mid.deneb.enyo.de>
Date: Thu, 04 Jan 2007 21:55:08 +0100
From: Florian Weimer <fw@...eb.enyo.de>
To: "NGSSoftware Insight Security Research" <nisr@...tgenss.com>
Cc: <bugtraq@...urityfocus.com>, <vulndiscuss@...nwatch.org>
Subject: Re: [VulnWatch] High Risk Vulnerability in the OpenOffice and StarOffice Suites

* NGSSoftware Insight Security Research:

> The vulnerabilities, three heap overflows, affect OpenOffice 2.1.0 and

> http://download.openoffice.org/2.1.0/index.html

As far as I can tell, there is no version newer than 2.1.0 available
at the web site.  According to uncorroborated, version 2.1.0 is not
affected.

Would anyone please clarify the situation?  Thanks.