[ GLSA 200510-12 ] KOffice, KWord: RTF import buffer overflow

[GLSA]

Gentoo Linux Security Advisory

Title: KOffice, KWord: RTF import buffer overflow (GLSA 200510-12)
Severity: normal
Exploitable: remote
Date: October 14, 2005
Bug(s): #108411
ID: 200510-12

Synopsis

KOffice and KWord are vulnerable to a buffer overflow in the RTF importer, potentially resulting in the execution of arbitrary code.

Background

KOffice is an integrated office suite for KDE. KWord is the KOffice word processor.

Affected Packages

Package: app-office/koffice
Vulnerable: < 1.4.1-r1
Unaffected: >= 1.4.1-r1
Architectures: All supported architectures

Package: app-office/kword
Vulnerable: < 1.4.1-r1
Unaffected: >= 1.4.1-r1
Architectures: All supported architectures


Description

Chris Evans discovered that the KWord RTF importer was vulnerable to a heap-based buffer overflow.

Impact

An attacker could entice a user to open a specially-crafted RTF file, potentially resulting in the execution of arbitrary code with the rights of the user running the affected application.

Workaround

There is no known workaround at this time.

Resolution

All KOffice users should upgrade to the latest version: