New OpenOffice bug affects Mac, Linux, as well as Windows

Filed under: Security, Windows, Macintosh, Linux, OpenOffice.org

ZDNet UK is reporting that a just-discovered bug in OpenOffice can victimize versions of the software running on Mac and Linux in addition to Windows. The bug allows an attacker to use malformed TIFF images to run malicious code on the user's computer, ostensibly for the purpose of spreading the malicious code like a trojan. The official explanation of a heap overflow exploit can be found here. (Sounds likes when there's too much garbage in our can.)

OpenOffice's developers have not yet released a fix for the bug (update: the bug does not exist in version 2.3 or newer), but the firm that discovered it is advising OpenOffice users to "be careful" with attachments received from unknown sources. Good advice--whether you run OpenOffice, Microsoft Office, or Wordstar.

New OpenOffice bug affects Mac, Linux, as well as Windows originally appeared on Download Squad on Tue, 25 Sep 2007 18:00:00 EST. Please see our terms for use of feeds.

Read | Permalink | Email this | Comments