Oracle Open Office and StarOffice/StarSuite Code Execution Vulnerabilities

Last Update Date: 1 Feb 2011 Release Date: 20 Jan 2011 7086 Views

RISK: High Risk

TYPE: Clients - Productivity Products

Two vulnerabilities have been identified in Oracle Open Office and StarOffice/StarSuite, which could be exploited by attackers to compromise a vulnerable system.

Impact

Remote Code Execution

System / Technologies affected

Oracle Open Office version 3.2.1 and prior
Oracle Sun StarOffice/StarSuite versions 7.x
Oracle Sun StarOffice/StarSuite versions 8.x

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Apply Oracle Critical Patch Update - January 2011 :
http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html

Vulnerability Identifier

CVE-2010-2935
CVE-2010-2936

Source

VUPEN
Secunia
Oracle