OpenOffice.org releases security patch

Got OpenOffice 2.3 or prior versions? Be prepared to download a security patch.

The OpenOffice.org community has issued a patch for a "highly critical" security vulnerability in OpenOffice 2.3 and prior versions, according to a security advisory issued by Secunia on Wednesday.

A security flaw in a third party default database engine module, HSQLDB, shipped with OpenOffice 2.3 and prior versions, could allow malicious attackers to launch arbitrary code. The vulnerabilities could be exploited by manipulating the database documents processing, according to a security advisory issued by OpenOffice.org

OpenOffice.org is asking users to download OpenOffice version 2.3.1. (Download OpenOffice.org 2.3.1 for Windows from CNET Download.com.)

OpenOffice 2.3 was released last September, shortly before security researchers reported vulnerabilities in OpenOffice 2.0.4 and earlier versions. The security flaws could allow attackers to gain control of users' systems via maliciously crafted TIFF files.

The OpenOffice productivity suite is gaining in popularity with its OpenDocument file format as an alternative to Microsoft Office.

[Razzl]

might have to get update from web

I updated 2 WinXP machines (not on the same network) and found that the "check for update" command under "help" on the openoffice 2.3 copies running on each returned an error message ("search for update failed") so I was only able to update by going to the web site and downloading from there. It cleans up your old version once it's done, but it is annoying that the update checker isn't working...

[funnymano]

also you can find all of open office links and files here

http://www.fileonfire.com/index.php?q=OpenOffice.org&t=1