Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

fstec логотип

BDU:2015-02892

Опубликовано: 01 янв. 2015
Источник: fstec
CVSS2: 9.3
EPSS Средний

Описание

Множественные уязвимости пакета libuno-cli-types1.1-cil операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно

Вендор

Сообщество свободного программного обеспечения

Наименование ПО

Debian GNU/Linux

Версия ПО

до 5 (Debian GNU/Linux)

Тип ПО

Операционная система

Операционные системы и аппаратные платформы

-

Уровень опасности уязвимости

Высокий уровень опасности (базовая оценка CVSS 2.0 составляет 9,3)

Возможные меры по устранению уязвимости

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 5:
ppc:
openoffice.org-math - 2.4.1+dfsg-1+lenny7
openoffice.org-evolution - 2.4.1+dfsg-1+lenny7
openoffice.org-officebean - 2.4.1+dfsg-1+lenny7
openoffice.org-impress - 2.4.1+dfsg-1+lenny7
openoffice.org-gnome - 2.4.1+dfsg-1+lenny7
openoffice.org - 2.4.1+dfsg-1+lenny7
python-uno - 2.4.1+dfsg-1+lenny7
openoffice.org-writer - 2.4.1+dfsg-1+lenny7
openoffice.org-draw - 2.4.1+dfsg-1+lenny7
openoffice.org-filter-binfilter - 2.4.1+dfsg-1+lenny7
openoffice.org-report-builder-bin - 2.4.1+dfsg-1+lenny7
mozilla-openoffice.org - 2.4.1+dfsg-1+lenny7
libmythes-dev - 2.4.1+dfsg-1+lenny7
ure-dbg - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-dbg - 2.4.1+dfsg-1+lenny7
openoffice.org-kde - 2.4.1+dfsg-1+lenny7
openoffice.org-headless - 2.4.1+dfsg-1+lenny7
openoffice.org-base - 2.4.1+dfsg-1+lenny7
openoffice.org-ogltrans - 2.4.1+dfsg-1+lenny7
openoffice.org-gtk - 2.4.1+dfsg-1+lenny7
openoffice.org-base-core - 2.4.1+dfsg-1+lenny7
openoffice.org-presentation-minimizer - 1.0+OOo2.4.1+dfsg-1+lenny7
openoffice.org-sdbc-postgresql - 0.7.6+OOo2.4.1+dfsg-1+lenny7
openoffice.org-dev - 2.4.1+dfsg-1+lenny7
ure - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-qa-tools - 2.4.1+dfsg-1+lenny7
openoffice.org-calc - 2.4.1+dfsg-1+lenny7
openoffice.org-core - 2.4.1+dfsg-1+lenny7
s390x:
ure - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-math - 2.4.1+dfsg-1+lenny7
openoffice.org - 2.4.1+dfsg-1+lenny7
openoffice.org-gcj - 2.4.1+dfsg-1+lenny7
openoffice.org-evolution - 2.4.1+dfsg-1+lenny7
openoffice.org-calc - 2.4.1+dfsg-1+lenny7
openoffice.org-dbg - 2.4.1+dfsg-1+lenny7
openoffice.org-core - 2.4.1+dfsg-1+lenny7
openoffice.org-dev - 2.4.1+dfsg-1+lenny7
ure-dbg - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-filter-binfilter - 2.4.1+dfsg-1+lenny7
openoffice.org-gnome - 2.4.1+dfsg-1+lenny7
openoffice.org-draw - 2.4.1+dfsg-1+lenny7
openoffice.org-officebean - 2.4.1+dfsg-1+lenny7
python-uno - 2.4.1+dfsg-1+lenny7
openoffice.org-writer - 2.4.1+dfsg-1+lenny7
openoffice.org-ogltrans - 2.4.1+dfsg-1+lenny7
openoffice.org-kde - 2.4.1+dfsg-1+lenny7
openoffice.org-presentation-minimizer - 1.0+OOo2.4.1+dfsg-1+lenny7
openoffice.org-base - 2.4.1+dfsg-1+lenny7
openoffice.org-gtk - 2.4.1+dfsg-1+lenny7
libmythes-dev - 2.4.1+dfsg-1+lenny7
mozilla-openoffice.org - 2.4.1+dfsg-1+lenny7
openoffice.org-qa-tools - 2.4.1+dfsg-1+lenny7
openoffice.org-sdbc-postgresql - 0.7.6+OOo2.4.1+dfsg-1+lenny7
openoffice.org-headless - 2.4.1+dfsg-1+lenny7
openoffice.org-impress - 2.4.1+dfsg-1+lenny7
openoffice.org-report-builder-bin - 2.4.1+dfsg-1+lenny7
openoffice.org-base-core - 2.4.1+dfsg-1+lenny7
i686:
openoffice.org-ogltrans - 2.4.1+dfsg-1+lenny7
openoffice.org-base-core - 2.4.1+dfsg-1+lenny7
mozilla-openoffice.org - 2.4.1+dfsg-1+lenny7
python-uno - 2.4.1+dfsg-1+lenny7
openoffice.org-draw - 2.4.1+dfsg-1+lenny7
openoffice.org-gnome - 2.4.1+dfsg-1+lenny7
openoffice.org-dev - 2.4.1+dfsg-1+lenny7
openoffice.org-impress - 2.4.1+dfsg-1+lenny7
openoffice.org-headless - 2.4.1+dfsg-1+lenny7
openoffice.org-report-builder-bin - 2.4.1+dfsg-1+lenny7
cli-uno-bridge - 2.4.1+dfsg-1+lenny7
ure-dbg - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-core - 2.4.1+dfsg-1+lenny7
openoffice.org-qa-tools - 2.4.1+dfsg-1+lenny7
openoffice.org-gtk - 2.4.1+dfsg-1+lenny7
openoffice.org-calc - 2.4.1+dfsg-1+lenny7
openoffice.org - 2.4.1+dfsg-1+lenny7
libmythes-dev - 2.4.1+dfsg-1+lenny7
ure - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-writer - 2.4.1+dfsg-1+lenny7
openoffice.org-filter-binfilter - 2.4.1+dfsg-1+lenny7
openoffice.org-evolution - 2.4.1+dfsg-1+lenny7
openoffice.org-kde - 2.4.1+dfsg-1+lenny7
openoffice.org-base - 2.4.1+dfsg-1+lenny7
openoffice.org-gcj - 2.4.1+dfsg-1+lenny7
openoffice.org-dbg - 2.4.1+dfsg-1+lenny7
openoffice.org-officebean - 2.4.1+dfsg-1+lenny7
openoffice.org-math - 2.4.1+dfsg-1+lenny7
openoffice.org-sdbc-postgresql - 0.7.6+OOo2.4.1+dfsg-1+lenny7
openoffice.org-presentation-minimizer - 1.0+OOo2.4.1+dfsg-1+lenny7
sparc:
openoffice.org-gcj - 2.4.1+dfsg-1+lenny7
openoffice.org-core - 2.4.1+dfsg-1+lenny7
openoffice.org-kde - 2.4.1+dfsg-1+lenny7
openoffice.org-gtk - 2.4.1+dfsg-1+lenny7
openoffice.org-evolution - 2.4.1+dfsg-1+lenny7
openoffice.org-writer - 2.4.1+dfsg-1+lenny7
openoffice.org-dbg - 2.4.1+dfsg-1+lenny7
openoffice.org-dev - 2.4.1+dfsg-1+lenny7
openoffice.org-qa-tools - 2.4.1+dfsg-1+lenny7
ure-dbg - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-officebean - 2.4.1+dfsg-1+lenny7
openoffice.org-gnome - 2.4.1+dfsg-1+lenny7
openoffice.org-report-builder-bin - 2.4.1+dfsg-1+lenny7
openoffice.org-impress - 2.4.1+dfsg-1+lenny7
openoffice.org-math - 2.4.1+dfsg-1+lenny7
mozilla-openoffice.org - 2.4.1+dfsg-1+lenny7
python-uno - 2.4.1+dfsg-1+lenny7
openoffice.org-draw - 2.4.1+dfsg-1+lenny7
ure - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-base-core - 2.4.1+dfsg-1+lenny7
openoffice.org-presentation-minimizer - 1.0+OOo2.4.1+dfsg-1+lenny7
openoffice.org-calc - 2.4.1+dfsg-1+lenny7
openoffice.org-filter-binfilter - 2.4.1+dfsg-1+lenny7
cli-uno-bridge - 2.4.1+dfsg-1+lenny7
openoffice.org-sdbc-postgresql - 0.7.6+OOo2.4.1+dfsg-1+lenny7
libmythes-dev - 2.4.1+dfsg-1+lenny7
openoffice.org-base - 2.4.1+dfsg-1+lenny7
openoffice.org - 2.4.1+dfsg-1+lenny7
openoffice.org-ogltrans - 2.4.1+dfsg-1+lenny7
openoffice.org-headless - 2.4.1+dfsg-1+lenny7
x86-64:
openoffice.org-headless - 2.4.1+dfsg-1+lenny7
openoffice.org-gtk - 2.4.1+dfsg-1+lenny7
openoffice.org-gnome - 2.4.1+dfsg-1+lenny7
openoffice.org-impress - 2.4.1+dfsg-1+lenny7
openoffice.org-core - 2.4.1+dfsg-1+lenny7
openoffice.org-sdbc-postgresql - 0.7.6+OOo2.4.1+dfsg-1+lenny7
mozilla-openoffice.org - 2.4.1+dfsg-1+lenny7
openoffice.org-report-builder-bin - 2.4.1+dfsg-1+lenny7
openoffice.org-presentation-minimizer - 1.0+OOo2.4.1+dfsg-1+lenny7
openoffice.org-base-core - 2.4.1+dfsg-1+lenny7
openoffice.org-qa-tools - 2.4.1+dfsg-1+lenny7
cli-uno-bridge - 2.4.1+dfsg-1+lenny7
openoffice.org-writer - 2.4.1+dfsg-1+lenny7
ure - 1.4+OOo2.4.1+dfsg-1+lenny7
python-uno - 2.4.1+dfsg-1+lenny7
openoffice.org-base - 2.4.1+dfsg-1+lenny7
ure-dbg - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org - 2.4.1+dfsg-1+lenny7
libmythes-dev - 2.4.1+dfsg-1+lenny7
openoffice.org-draw - 2.4.1+dfsg-1+lenny7
openoffice.org-evolution - 2.4.1+dfsg-1+lenny7
openoffice.org-filter-binfilter - 2.4.1+dfsg-1+lenny7
openoffice.org-gcj - 2.4.1+dfsg-1+lenny7
openoffice.org-dev - 2.4.1+dfsg-1+lenny7
openoffice.org-kde - 2.4.1+dfsg-1+lenny7
openoffice.org-officebean - 2.4.1+dfsg-1+lenny7
openoffice.org-dbg - 2.4.1+dfsg-1+lenny7
openoffice.org-calc - 2.4.1+dfsg-1+lenny7
openoffice.org-math - 2.4.1+dfsg-1+lenny7
armel:
python-uno - 2.4.1+dfsg-1+lenny7
openoffice.org-gnome - 2.4.1+dfsg-1+lenny7
openoffice.org-headless - 2.4.1+dfsg-1+lenny7
openoffice.org-report-builder-bin - 2.4.1+dfsg-1+lenny7
openoffice.org-base-core - 2.4.1+dfsg-1+lenny7
openoffice.org-dbg - 2.4.1+dfsg-1+lenny7
openoffice.org-math - 2.4.1+dfsg-1+lenny7
openoffice.org-draw - 2.4.1+dfsg-1+lenny7
ure - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-writer - 2.4.1+dfsg-1+lenny7
openoffice.org-gtk - 2.4.1+dfsg-1+lenny7
openoffice.org-core - 2.4.1+dfsg-1+lenny7
libmythes-dev - 2.4.1+dfsg-1+lenny7
ure-dbg - 1.4+OOo2.4.1+dfsg-1+lenny7
mozilla-openoffice.org - 2.4.1+dfsg-1+lenny7
openoffice.org-qa-tools - 2.4.1+dfsg-1+lenny7
openoffice.org-sdbc-postgresql - 0.7.6+OOo2.4.1+dfsg-1+lenny7
openoffice.org - 2.4.1+dfsg-1+lenny7
openoffice.org-presentation-minimizer - 1.0+OOo2.4.1+dfsg-1+lenny7
openoffice.org-impress - 2.4.1+dfsg-1+lenny7
openoffice.org-calc - 2.4.1+dfsg-1+lenny7
openoffice.org-officebean - 2.4.1+dfsg-1+lenny7
openoffice.org-evolution - 2.4.1+dfsg-1+lenny7
openoffice.org-gcj - 2.4.1+dfsg-1+lenny7
openoffice.org-base - 2.4.1+dfsg-1+lenny7
openoffice.org-dev - 2.4.1+dfsg-1+lenny7
openoffice.org-kde - 2.4.1+dfsg-1+lenny7
ia64:
openoffice.org - 2.4.1+dfsg-1+lenny7
openoffice.org-gcj - 2.4.1+dfsg-1+lenny7
openoffice.org-impress - 2.4.1+dfsg-1+lenny7
openoffice.org-base - 2.4.1+dfsg-1+lenny7
openoffice.org-calc - 2.4.1+dfsg-1+lenny7
openoffice.org-evolution - 2.4.1+dfsg-1+lenny7
openoffice.org-sdbc-postgresql - 0.7.6+OOo2.4.1+dfsg-1+lenny7
openoffice.org-headless - 2.4.1+dfsg-1+lenny7
openoffice.org-presentation-minimizer - 1.0+OOo2.4.1+dfsg-1+lenny7
openoffice.org-gnome - 2.4.1+dfsg-1+lenny7
openoffice.org-kde - 2.4.1+dfsg-1+lenny7
openoffice.org-gtk - 2.4.1+dfsg-1+lenny7
ure - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-math - 2.4.1+dfsg-1+lenny7
openoffice.org-report-builder-bin - 2.4.1+dfsg-1+lenny7
ure-dbg - 1.4+OOo2.4.1+dfsg-1+lenny7
libmythes-dev - 2.4.1+dfsg-1+lenny7
mozilla-openoffice.org - 2.4.1+dfsg-1+lenny7
openoffice.org-dbg - 2.4.1+dfsg-1+lenny7
openoffice.org-officebean - 2.4.1+dfsg-1+lenny7
openoffice.org-writer - 2.4.1+dfsg-1+lenny7
python-uno - 2.4.1+dfsg-1+lenny7
openoffice.org-dev - 2.4.1+dfsg-1+lenny7
openoffice.org-core - 2.4.1+dfsg-1+lenny7
openoffice.org-draw - 2.4.1+dfsg-1+lenny7
openoffice.org-filter-binfilter - 2.4.1+dfsg-1+lenny7
cli-uno-bridge - 2.4.1+dfsg-1+lenny7
openoffice.org-base-core - 2.4.1+dfsg-1+lenny7
mips:
openoffice.org-gcj - 2.4.1+dfsg-1+lenny7
openoffice.org-dbg - 2.4.1+dfsg-1+lenny7
openoffice.org-calc - 2.4.1+dfsg-1+lenny7
openoffice.org-math - 2.4.1+dfsg-1+lenny7
ure-dbg - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-core - 2.4.1+dfsg-1+lenny7
openoffice.org-draw - 2.4.1+dfsg-1+lenny7
openoffice.org-headless - 2.4.1+dfsg-1+lenny7
python-uno - 2.4.1+dfsg-1+lenny7
openoffice.org-filter-binfilter - 2.4.1+dfsg-1+lenny7
openoffice.org-sdbc-postgresql - 0.7.6+OOo2.4.1+dfsg-1+lenny7
openoffice.org-writer - 2.4.1+dfsg-1+lenny7
openoffice.org-officebean - 2.4.1+dfsg-1+lenny7
ure - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-gnome - 2.4.1+dfsg-1+lenny7
openoffice.org-dev - 2.4.1+dfsg-1+lenny7
openoffice.org - 2.4.1+dfsg-1+lenny7
openoffice.org-kde - 2.4.1+dfsg-1+lenny7
openoffice.org-evolution - 2.4.1+dfsg-1+lenny7
libmythes-dev - 2.4.1+dfsg-1+lenny7
openoffice.org-impress - 2.4.1+dfsg-1+lenny7
openoffice.org-base-core - 2.4.1+dfsg-1+lenny7
openoffice.org-base - 2.4.1+dfsg-1+lenny7
openoffice.org-presentation-minimizer - 1.0+OOo2.4.1+dfsg-1+lenny7
openoffice.org-qa-tools - 2.4.1+dfsg-1+lenny7
openoffice.org-gtk - 2.4.1+dfsg-1+lenny7
mozilla-openoffice.org - 2.4.1+dfsg-1+lenny7
openoffice.org-report-builder-bin - 2.4.1+dfsg-1+lenny7
noarch:
openoffice.org-l10n-ts - 2.4.1+dfsg-1+lenny7
openoffice.org-l10n-za - 2.4.1+dfsg-1+lenny7
openoffice.org-l10n-as-in - 2.4.1+dfsg-1+lenny7
openoffice.org-l10n-be-by - 2.4.1+dfsg-1+lenny7
openoffice.org-l10n-or-in - 2.4.1+dfsg-1+lenny7
openoffice.org-l10n-ne - 2.4.1+dfsg-1+lenny7
openoffice.org-l10n-nb - 2.4.1+dfsg-1+lenny7
openoffice.org-help-ko - 2.4.1+dfsg-1+lenny7
openoffice.org-report-builder - 1.0.2+OOo2.4.1+dfsg-1+lenny7
openoffice.org-l10n-cy - 2.4.1+dfsg-1+lenny7
openoffice.org-style-crystal - 2.4.1+dfsg-1+lenny7
openoffice.org-help-da - 2.4.1+dfsg-1+lenny7
openoffice.org-help-eu - 2.4.1+dfsg-1+lenn

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Данные уточняются

Информация об устранении

Уязвимость устранена

Идентификаторы других систем описаний уязвимостей

EPSS

Процентиль: 95%
0.20596
Средний

9.3 Critical

CVSS2

Связанные уязвимости

ubuntu
около 15 лет назад

OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbitrary Python code via a crafted OpenDocument Text (ODT) file that triggers code execution when the macro directory structure is previewed.

redhat
около 15 лет назад

OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbitrary Python code via a crafted OpenDocument Text (ODT) file that triggers code execution when the macro directory structure is previewed.

nvd
около 15 лет назад

OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbitrary Python code via a crafted OpenDocument Text (ODT) file that triggers code execution when the macro directory structure is previewed.

debian
около 15 лет назад

OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote at ...

github
больше 3 лет назад

OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbitrary Python code via a crafted OpenDocument Text (ODT) file that triggers code execution when the macro directory structure is previewed.

EPSS

Процентиль: 95%
0.20596
Средний

9.3 Critical

CVSS2