in

eEye Digital Security

The endpoint to vulnerability starts here.

 
eEye Digital Security » Blink Forums » Vulnerability Assessment » Openoffice 3.1.1 not recognized

Openoffice 3.1.1 not recognized

Last post 09-25-2009 7:01 PM by vkundakci. 7 replies.
Page 1 of 1 (8 items)
Sort Posts: Previous Next

  • 09-06-2009 8:24 PM

    Openoffice 3.1.1 not recognized

    Reply Contact

     

    Recently Openoffice 3.1.1 started to come up as vulnerable for CVE-2009-0200 and CVE-2009-0201.  Supposedly the buffer overflow problems were fixed in this release.  The report below mistakenly indicates that the problem is fixed in 3.3.1.  Maybe the version test has the same error.

    BID 36200
    CVE CVE-2009-0200, CVE-2009-0201
    Description OpenOffice contains mutliple heap-based buffer overflows when handling documents containing malformed Word document tables. Successful exploitation could allow execution of arbitrary code or could cause the application to crash.
    How To Fix Upgrade OpenOffice to version 3.3.1 or newer.
    Links Secunia Advisory - 35036
    Risk High
    Filed under:

  • 09-08-2009 10:04 AM In reply to

    • bpatten
    • Top 10 Contributor
    • Joined on 09-24-2007
    • Irvine, CA
    • Posts 155

    Re: Openoffice 3.1.1 not recognized

    Reply Contact

    Retina is looking at a regkey. Are you seeing this in Retina or Blink?

    Perhaps you could view HKEY_LOCAL_MACHINE\SOFTWARE\OpenOffice.org in regedit to see what the version shows?

     

  • 09-09-2009 12:40 PM In reply to

    Re: Openoffice 3.1.1 not recognized

    Reply Contact

    I am seeing this in Blink personal. 

    HKEY_LOCAL_MACHINE\SOFTWARE\OpenOffice.org\OpenOffice.org has a subkey of 3.1.

    HKEY_LOCAL_MACHINE\SOFTWARE\OpenOffice.org\OpenOffice.org\3.1\{7C35B9AB-2CE3-4C18-BE7C-5B97EA089EB3}\ProductVersion is 3.1.9420. 

    HKEY_LOCAL_MACHINE\SOFTWARE\OpenOffice.org\OpenOffice.org\3.1\{A16B3EA2-8798-4960-8D8B-18D3149AD617}\ProductVersion is also 3.1.9420.

    About tab in Openoffice app shows the version as:

    OpenOffice.org 3.1.1

    OOO310m19 (Build:9420)

    Thanks. /V

    bpatten:

    Retina is looking at a regkey. Are you seeing this in Retina or Blink?

    Perhaps you could view HKEY_LOCAL_MACHINE\SOFTWARE\OpenOffice.org in regedit to see what the version shows?

     

     
    Filed under:

  • 09-11-2009 4:13 PM In reply to

    • bpatten
    • Top 10 Contributor
    • Joined on 09-24-2007
    • Irvine, CA
    • Posts 155

    Re: Openoffice 3.1.1 not recognized

    Reply Contact
    Thank you. If you go to Add Remove Programs, look for Open Office, click on View Support information, what version is shown?

  • 09-12-2009 10:57 AM In reply to

    Re: Openoffice 3.1.1 not recognized

    Reply Contact

    Version: 3.1.9420

    Comments: OpenOffice.org 3.1 (en-US) (OOO310m19(Build:9420))

     

    bpatten:
    Thank you. If you go to Add Remove Programs, look for Open Office, click on View Support information, what version is shown?

     

     
    Filed under:

  • 09-15-2009 10:08 AM In reply to

    • bpatten
    • Top 10 Contributor
    • Joined on 09-24-2007
    • Irvine, CA
    • Posts 155

    Re: Openoffice 3.1.1 not recognized

    Reply Contact

    Hi Vkundakci,

    I think that is your issue. Your add remove programs entry shows 3.1 yet 3.3.1 is the latest. I believe you'll need to update Open Office.

    Hope that helps

    Brian

     

  • 09-15-2009 6:02 PM In reply to

    Re: Openoffice 3.1.1 not recognized

    Reply Contact

    Thanks but I don't think so!  The latest release is 3.1.1 and that's what I have.  Your test is failing because of your assumption that the latest release is 3.3.1.  Please verify at http://download.openoffice.org/other.html

     

    bpatten:

    Hi Vkundakci,

    I think that is your issue. Your add remove programs entry shows 3.1 yet 3.3.1 is the latest. I believe you'll need to update Open Office.

    Hope that helps

    Brian

     

     
    Filed under:

  • 09-25-2009 7:01 PM In reply to

    Re: Openoffice 3.1.1 not recognized

    Reply Contact

    I no longer get a vulnerablity warning for Openoffice 3.1.1.  The Blink test must have been corrected.  Thanks.  /V

     

    vkundakci:

    Thanks but I don't think so!  The latest release is 3.1.1 and that's what I have.  Your test is failing because of your assumption that the latest release is 3.3.1.  Please verify at http://download.openoffice.org/other.html

     

    bpatten:

    Hi Vkundakci,

    I think that is your issue. Your add remove programs entry shows 3.1 yet 3.3.1 is the latest. I believe you'll need to update Open Office.

    Hope that helps

    Brian

     

     

     

     
    Filed under:
Page 1 of 1 (8 items)
© 1995 - 2009 eEye Incorporated