Upstream information

CVE-2009-2140 at MITRE

Description

Multiple heap-based buffer overflows in cppcanvas/source/mtfrenderer/emfplus.cxx in Go-oo 2.x and 3.x before 3.0.1, previously named ooo-build and related to OpenOffice.org (OOo), allow remote attackers to execute arbitrary code via a crafted EMF+ file, a similar issue to CVE-2008-2238.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having critical severity.

CVSS v2 Scores
  National Vulnerability Database
Base Score 9.3
Vector AV:N/AC:M/Au:N/C:C/I:C/A:C
Access Vector Network
Access Complexity Medium
Authentication None
Confidentiality Impact Complete
Integrity Impact Complete
Availability Impact Complete
SUSE Bugzilla entries: 437666 [RESOLVED / FIXED], 514085 [RESOLVED / FIXED]

No SUSE Security Announcements cross referenced.

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise SDK 10 SP2
  • OpenOffice_org >= 3.1.1-0.3
  • OpenOffice_org-cs >= 3.1.1-0.3
  • OpenOffice_org-de >= 3.1.1-0.3
  • OpenOffice_org-es >= 3.1.1-0.3
  • OpenOffice_org-fr >= 3.1.1-0.3
  • OpenOffice_org-galleries >= 3.1.1-0.3
  • OpenOffice_org-gnome >= 3.1.1-0.3
  • OpenOffice_org-hu >= 3.1.1-0.3
  • OpenOffice_org-it >= 3.1.1-0.3
  • OpenOffice_org-ja >= 3.1.1-0.3
  • OpenOffice_org-kde >= 3.1.1-0.3
  • OpenOffice_org-mono >= 3.1.1-0.3
  • OpenOffice_org-pl >= 3.1.1-0.3
  • OpenOffice_org-pt-BR >= 3.1.1-0.3
  • OpenOffice_org-sk >= 3.1.1-0.3
  • OpenOffice_org-zh-CN >= 3.1.1-0.3
  • OpenOffice_org-zh-TW >= 3.1.1-0.3
sled10-sp2.x86-64
sle10-sp2-sdk.x86
sle10-sp2-sdk.x86-64
sles10-sp2-debuginfo.x86
sled10-sp2.x86
sles10-sp2-debuginfo.x86-64
ZYPP Patch Nr: 6469
openSUSE 11.0
  • OpenOffice_org-debuginfo >= 2.4.0.14-1.4
  • OpenOffice_org-debugsource >= 2.4.0.14-1.4
openSUSE 11.0
  • OpenOffice_org >= 2.4.0.14-1.4
  • OpenOffice_org-base >= 2.4.0.14-1.4
  • OpenOffice_org-branding-upstream >= 2.4.0.14-1.4
  • OpenOffice_org-calc >= 2.4.0.14-1.4
  • OpenOffice_org-devel >= 2.4.0.14-1.4
  • OpenOffice_org-draw >= 2.4.0.14-1.4
  • OpenOffice_org-filters >= 2.4.0.14-1.4
  • OpenOffice_org-gnome >= 2.4.0.14-1.4
  • OpenOffice_org-icon-themes-prebuilt >= 2.4.0.14-1.4
  • OpenOffice_org-impress >= 2.4.0.14-1.4
  • OpenOffice_org-kde >= 2.4.0.14-1.4
  • OpenOffice_org-mailmerge >= 2.4.0.14-1.4
  • OpenOffice_org-math >= 2.4.0.14-1.4
  • OpenOffice_org-mono >= 2.4.0.14-1.4
  • OpenOffice_org-officebean >= 2.4.0.14-1.4
  • OpenOffice_org-pyuno >= 2.4.0.14-1.4
  • OpenOffice_org-sdk >= 2.4.0.14-1.4
  • OpenOffice_org-sdk-doc >= 2.4.0.14-1.4
  • OpenOffice_org-testtool >= 2.4.0.14-1.4
  • OpenOffice_org-writer >= 2.4.0.14-1.4
SUSE Linux Enterprise SDK 11 GA
  • OpenOffice_org >= 3.1.1.1-0.1.1
  • OpenOffice_org-artwork-devel >= 3.1.1.1-0.1.1
  • OpenOffice_org-base >= 3.1.1.1-0.1.1
  • OpenOffice_org-base-devel >= 3.1.1.1-0.1.1
  • OpenOffice_org-bootstrap >= 3.1.1.1-0.1.1
  • OpenOffice_org-calc >= 3.1.1.1-0.1.1
  • OpenOffice_org-calc-devel >= 3.1.1.1-0.1.1
  • OpenOffice_org-components >= 3.1.1.1-0.1.1
  • OpenOffice_org-components-devel >= 3.1.1.1-0.1.1
  • OpenOffice_org-draw >= 3.1.1.1-0.1.1
  • OpenOffice_org-filters >= 3.1.1.1-0.1.1
  • OpenOffice_org-filters-devel >= 3.1.1.1-0.1.1
  • OpenOffice_org-filters-optional >= 3.1.1.1-0.1.1
  • OpenOffice_org-gnome >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-ar >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-cs >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-da >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-de >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-en-GB >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-en-US >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-en-US-devel >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-es >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-fr >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-hu >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-it >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-ja >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-nl >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-pl >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-pt >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-pt-BR >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-ru >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-sv >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-zh-CN >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-zh-TW >= 3.1.1.1-0.1.1
  • OpenOffice_org-icon-themes >= 3.1.1.1-0.1.1
  • OpenOffice_org-impress >= 3.1.1.1-0.1.1
  • OpenOffice_org-impress-devel >= 3.1.1.1-0.1.1
  • OpenOffice_org-kde >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-af >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-ar >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-ca >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-cs >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-da >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-de >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-el >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-en-GB >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-es >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-extras >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-extras-devel >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-fi >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-fr >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-hu >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-it >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-ja >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-nb >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-nl >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-nn >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-pl >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-pt >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-pt-BR >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-ru >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-sk >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-sv >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-xh >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-zh-CN >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-zh-TW >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-zu >= 3.1.1.1-0.1.1
  • OpenOffice_org-libs-core >= 3.1.1.1-0.1.1
  • OpenOffice_org-libs-core-devel >= 3.1.1.1-0.1.1
  • OpenOffice_org-libs-extern >= 3.1.1.1-0.1.1
  • OpenOffice_org-libs-extern-devel >= 3.1.1.1-0.1.1
  • OpenOffice_org-libs-gui >= 3.1.1.1-0.1.1
  • OpenOffice_org-libs-gui-devel >= 3.1.1.1-0.1.1
  • OpenOffice_org-mailmerge >= 3.1.1.1-0.1.1
  • OpenOffice_org-math >= 3.1.1.1-0.1.1
  • OpenOffice_org-mono >= 3.1.1.1-0.1.1
  • OpenOffice_org-officebean >= 3.1.1.1-0.1.1
  • OpenOffice_org-pyuno >= 3.1.1.1-0.1.1
  • OpenOffice_org-testtool >= 3.1.1.1-0.1.1
  • OpenOffice_org-ure >= 3.1.1.1-0.1.1
  • OpenOffice_org-ure-devel >= 3.1.1.1-0.1.1
  • OpenOffice_org-writer >= 3.1.1.1-0.1.1
  • OpenOffice_org-writer-devel >= 3.1.1.1-0.1.1
sle11-sdk.x86-64
sled11.x86
sle11-sdk.x86
sle11-debuginfo.x86-64
sle11-debuginfo.x86
sled11.x86-64
SAT Patch Nr: 1258
SUSE Linux Enterprise Desktop 11 GA
  • OpenOffice_org >= 3.1.1.1-0.1.1
  • OpenOffice_org-LanguageTool >= 0.9.9-2.1.2
  • OpenOffice_org-LanguageTool-de >= 0.9.9-2.1.2
  • OpenOffice_org-LanguageTool-en >= 0.9.9-2.1.2
  • OpenOffice_org-LanguageTool-es >= 0.9.9-2.1.2
  • OpenOffice_org-LanguageTool-fr >= 0.9.9-2.1.2
  • OpenOffice_org-LanguageTool-it >= 0.9.9-2.1.2
  • OpenOffice_org-LanguageTool-nl >= 0.9.9-2.1.2
  • OpenOffice_org-LanguageTool-pl >= 0.9.9-2.1.2
  • OpenOffice_org-LanguageTool-sv >= 0.9.9-2.1.2
  • OpenOffice_org-base >= 3.1.1.1-0.1.1
  • OpenOffice_org-base-drivers-postgresql >= 3.1.1.1-0.1.1
  • OpenOffice_org-base-extensions >= 3.1.1.1-0.1.1
  • OpenOffice_org-calc >= 3.1.1.1-0.1.1
  • OpenOffice_org-calc-extensions >= 3.1.1.1-0.1.1
  • OpenOffice_org-components >= 3.1.1.1-0.1.1
  • OpenOffice_org-draw >= 3.1.1.1-0.1.1
  • OpenOffice_org-draw-extensions >= 3.1.1.1-0.1.1
  • OpenOffice_org-filters >= 3.1.1.1-0.1.1
  • OpenOffice_org-filters-optional >= 3.1.1.1-0.1.1
  • OpenOffice_org-gnome >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-ar >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-cs >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-da >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-de >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-en-GB >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-en-US >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-en-US-devel >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-es >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-fr >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-gu-IN >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-hi-IN >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-hu >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-it >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-ja >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-ko >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-nl >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-pl >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-pt >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-pt-BR >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-ru >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-sv >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-zh-CN >= 3.1.1.1-0.1.1
  • OpenOffice_org-help-zh-TW >= 3.1.1.1-0.1.1
  • OpenOffice_org-icon-themes >= 3.1.1.1-0.1.1
  • OpenOffice_org-impress >= 3.1.1.1-0.1.1
  • OpenOffice_org-impress-extensions >= 3.1.1.1-0.1.1
  • OpenOffice_org-kde >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-af >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-ar >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-ca >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-cs >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-da >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-de >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-el >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-en-GB >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-es >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-extras >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-fi >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-fr >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-gu-IN >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-hi-IN >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-hu >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-it >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-ja >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-ko >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-nb >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-nl >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-nn >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-pl >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-pt >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-pt-BR >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-ru >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-sk >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-sv >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-xh >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-zh-CN >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-zh-TW >= 3.1.1.1-0.1.1
  • OpenOffice_org-l10n-zu >= 3.1.1.1-0.1.1
  • OpenOffice_org-libs-core >= 3.1.1.1-0.1.1
  • OpenOffice_org-libs-extern >= 3.1.1.1-0.1.1
  • OpenOffice_org-libs-gui >= 3.1.1.1-0.1.1
  • OpenOffice_org-mailmerge >= 3.1.1.1-0.1.1
  • OpenOffice_org-math >= 3.1.1.1-0.1.1
  • OpenOffice_org-mono >= 3.1.1.1-0.1.1
  • OpenOffice_org-officebean >= 3.1.1.1-0.1.1
  • OpenOffice_org-pyuno >= 3.1.1.1-0.1.1
  • OpenOffice_org-ure >= 3.1.1.1-0.1.1
  • OpenOffice_org-writer >= 3.1.1.1-0.1.1
  • OpenOffice_org-writer-extensions >= 3.1.1.1-0.1.1
sle11-sdk.x86-64
sled11.x86
sle11-sdk.x86
sle11-debuginfo.x86-64
sle11-debuginfo.x86
sled11.x86-64
SAT Patch Nr: 1258
Novell Linux Desktop 9 for x86
Novell Linux Desktop 9 for x86_64
  • OpenOffice_org >= 1.1.5-0.26
  • OpenOffice_org-ar >= 1.1.5-0.26
  • OpenOffice_org-ca >= 1.1.5-0.26
  • OpenOffice_org-cs >= 1.1.5-0.26
  • OpenOffice_org-da >= 1.1.5-0.26
  • OpenOffice_org-de >= 1.1.5-0.26
  • OpenOffice_org-el >= 1.1.5-0.26
  • OpenOffice_org-en >= 1.1.5-0.26
  • OpenOffice_org-en-help >= 1.1.5-0.26
  • OpenOffice_org-es >= 1.1.5-0.26
  • OpenOffice_org-et >= 1.1.5-0.26
  • OpenOffice_org-fi >= 1.1.5-0.26
  • OpenOffice_org-fr >= 1.1.5-0.26
  • OpenOffice_org-gnome >= 1.1.5-0.26
  • OpenOffice_org-hu >= 1.1.5-0.26
  • OpenOffice_org-it >= 1.1.5-0.26
  • OpenOffice_org-ja >= 1.1.5-0.26
  • OpenOffice_org-kde >= 1.1.5-0.26
  • OpenOffice_org-ko >= 1.1.5-0.26
  • OpenOffice_org-nl >= 1.1.5-0.26
  • OpenOffice_org-pl >= 1.1.5-0.26
  • OpenOffice_org-pt >= 1.1.5-0.26
  • OpenOffice_org-pt-BR >= 1.1.5-0.26
  • OpenOffice_org-ru >= 1.1.5-0.26
  • OpenOffice_org-sk >= 1.1.5-0.26
  • OpenOffice_org-sl >= 1.1.5-0.26
  • OpenOffice_org-sv >= 1.1.5-0.26
  • OpenOffice_org-tr >= 1.1.5-0.26
  • OpenOffice_org-zh-CN >= 1.1.5-0.26
  • OpenOffice_org-zh-TW >= 1.1.5-0.26
sles9-nld.x86
sles9-nld.x86-64
YOU Patch Nr: 12500