Sun StarOffice / StarSuite XML Parsing Multiple Vulnerabilities
RISK: Medium Risk
Multiple vulnerabilities have been identified in Sun StarOffice/StarSuite, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system.
1. User-after-free errors when processing an XML document with specially-crafted Notation or Enumeration attribute types in a DTD definition, which could be exploited to crash an affected application or execute arbitrary code.
2. An error when handling ELEMENT DTD definitions while parsing child content, which could be exploited to cause a denial of service.
Impact
- Denial of Service
- Remote Code Execution
System / Technologies affected
- Sun StarOffice / StarSuite versions 8.x
- Sun StarOffice / StarSuite versions 9.x
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
Apply patches :
http://sunsolve.sun.com/search/document.do?assetkey=1-66-266088-1
Vulnerability Identifier
Source
Related Link
Share with