A security vulnerability with the way StarOffice/StarSuite 7 and 8 process Windows Metafile (.wmf) files may allow a remote unprivileged user who provides a StarOffice/StarSuite document that is opened by a local user to execute arbitrary commands on the system with the privileges of the user running StarOffice/StarSuite.

This issue is described in the following document:

CVE-2008-2237 at: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2008-2237

Sun acknowledges with thanks, an anonymous researcher working with the SureRun security team (http://www.SureRun.cn).

Permalink |