Oxygen Office Professional 2.3.1 for Windows and Linux fixes a number of bugs.
One of the fixes is for a security-related problem in the integrated database which gave attackers a vector. Attackers could inject a manipulated document with SQL queries to inject malicious code and thus escalate privileges. Oxygen Office is based on Open Office where the vulnerability was removed several days ago when the suite went to Version 2.3.1. The vulnerability also affects Staroffice
Oxygen Office Professional is based on the modified Open Office source code and includes a number of add-ons including clipart, photos, templates and fonts. Version 2.3 gives users the ability to export to Latex and Mediawiki format, and import from Works, WordPerfect and the T602 format of the free eastern European 602 suite - Microsoft OOXML is still undergoing testing. Wikipedia, the free encyclopedia is integrated via the OpenOfice tool.
Oxygen Office 2.3.1 is available for Windows and Linux (as a Debian and RPM package). The download is free.
Look here for archived tutorials and talks from USENIX Security '08. Each comprises a video and recorded presentation slides which are shown parallel to the talk.
Comments