Bugtraqmailing list archives

By Date

By Thread

[ GLSA 200501-20 ] o3read: Buffer overflow during file conversion

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -Gentoo Linux Security Advisory                           GLSA 200501-20- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -http://security.gentoo.org/- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  Severity: Normal     Title: o3read: Buffer overflow during file conversion      Date: January 11, 2005      Bugs: #74478        ID: 200501-20- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -Synopsis========A buffer overflow in o3read allows an attacker to execute arbitrarycode by way of a specially crafted XML file.Background==========o3read is a standalone converter for OpenOffice.org files. It allows auser to dump the contents tree (o3read) and convert to plain text(o3totxt) or to HTML (o3tohtml) Writer and Calc files.Affected packages=================    -------------------------------------------------------------------     Package          /  Vulnerable  /                      Unaffected    -------------------------------------------------------------------  1  app-text/o3read      <= 0.0.3                            >= 0.0.4Description===========Wiktor Kopec discovered that the parse_html function in o3read.c copiesany number of bytes into a 1024-byte t[] array.Impact======Using a specially crafted file, possibly delivered by e-mail or overthe Web, an attacker may execute arbitrary code with the permissions ofthe user running o3read.Workaround==========There is no known workaround at this time.Resolution==========All o3read users should upgrade to the latest version:    # emerge --sync    # emerge --ask --oneshot --verbose ">=app-text/o3read-0.0.4"References==========  [ 1 ] CAN-2004-1288http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1288  [ 2 ] Wiktor Kopec advisoryhttp://tigger.uic.edu/~jlongs2/holes/o3read.txtAvailability============This GLSA and any updates to it are available for viewing atthe Gentoo Security Website:http://security.gentoo.org/glsa/glsa-200501-20.xmlConcerns?=========Security is a primary focus of Gentoo Linux and ensuring theconfidentiality and security of our users machines is of utmostimportance to us. Any security concerns should be addressed tosecurity () gentoo org or alternatively, you may file a bug athttp://bugs.gentoo.org.License=======Copyright 2005 Gentoo Foundation, Inc; referenced textbelongs to its owner(s).The contents of this document are licensed under theCreative Commons - Attribution / Share Alike license.http://creativecommons.org/licenses/by-sa/2.0

Attachment:signature.asc
Description: OpenPGP digital signature

By Date

By Thread

Current thread:

• [ GLSA 200501-20 ] o3read: Buffer overflow during file conversionThierry Carrez (Jan 11)