----------------------------------------------------------------------

Do you have VARM strategy implemented?

(Vulnerability Assessment Remediation Management)  

If not, then implement it through the most reliable vulnerability
intelligence source on the market. 

Implement it through Secunia. 

For more information visit:
https://secunia.com/advisories/business_solutions/

Alternatively request a call from a Secunia representative today to
discuss how we can help you with our capabilities contact us at:
sales@secunia.com

----------------------------------------------------------------------

TITLE:
Sun StarOffice / StarSuite XML Parsing Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA36811

VERIFY ADVISORY:
https://secunia.com/advisories/36811/

DESCRIPTION:
Sun has acknowledged some vulnerabilities in StarOffice and
StarSuite, which can be exploited by malicious people to potentially
compromise a user's system.

The vulnerabilities are caused due to errors when processing XML
documents and may be exploited to execute arbitrary code.

This is related to:
SA36631

SOLUTION:
Apply updates.

-- SPARC Platform --

StarOffice 8:
Apply update 14 (patch 120185-19) or later.

StarSuite 8:
Apply update 14 (patch 120189-19) or later.

StarOffice 9:
Apply update 3 (patch 142188-01) or later.

StarSuite 9:
Apply update 3 (patch 142189-01) or later.


-- x86 Platform --

StarOffice 8:
Apply update 14 (patch 120186-19) or later.

StarSuite 8:
Apply update 14 (patch 120190-19) or later.

StarOffice 9:
Apply update 3 (patch 142190-01) or later.

StarSuite 9:
Apply update 3 (patch 142191-01) or later.


-- Linux Platform --

StarOffice 8:
Apply update 14 (patch 120184-18) or later.

StarSuite 8:
Apply update 14 (patch 120188-18) or later.

StarOffice 9:
Apply update 3 (patch 142212-01) or later.

StarSuite 9:
Apply update 3 (patch 142213-01) or later.


-- Windows Platform --

StarOffice 8:
Apply update 14 (patch 120187-18) or later.

StarSuite 8:
Apply update 14 (patch 120191-18) or later.

StarSuite 8 Impress Standalone:
Apply update 14 for Windows (patch 128021-06) or later.

StarOffice 9 (ar):
Apply update 3 (patch 142193-01) or later.

StarOffice 9 (en-US):
Apply update 3 (patch 142194-01) or later.

StarOffice 9 (de):
Apply update 3 (patch 142195-01) or later.

StarOffice 9 (es):
Apply update 3 (patch 142196-01) or later.

StarOffice 9 (it):
Apply update 3 (patch 142197-01) or later.

StarOffice 9 (fr):
Apply update 3 (patch 142198-01) or later.

StarOffice 9 (sv):
Apply update 3 (patch 142199-01) or later.

StarOffice 9 (nl):
Apply update 3 (patch 142200-01) or later.

StarOffice 9 (hu):
Apply update 3 (patch 142201-01) or later.

StarOffice 9 (ru):
Apply update 3 (patch 142202-01) or later.

StarOffice 9 (pl):
Apply update 3 (patch 142203-01) or later.

StarOffice 9 (pt):
Apply update 3 (patch 142204-01) or later.

StarOffice 9 (pt-BR):
Apply update 3 (patch 142205-01) or later.

StarOffice 9 (en-US, de, es, it, fr, sv, nl, hu, ru, pl, pt, pt-BR,
ar):
Apply update 3 (patch 142206-01) or later.

StarSuite 9 (ja):
Apply update 3 (patch 142207-01) or later.

StarSuite 9 (ko):
Apply update 3 (patch 142208-01) or later.

StarSuite 9 (zh-CN):
Apply update 3 (patch 142209-01) or later.

StarSuite 9 (zh-TW):
Apply update 3 (patch 142210-01) or later.

StarSuite 9 (en-US, ja, ko, zh-CN, zh-TW):
Apply update 3 (patch 142211-01) or later.


-- Mac OSX x86 Platform --

StarOffice 9 (ar):
Apply update 3 (patch 142214-01) or later.

StarOffice 9 (en-US):
Apply update 3 (patch 142215-01) or later.

StarOffice 9 (de):
Apply update 3 (patch 142216-01) or later.

StarOffice 9 (es):
Apply update 3 (patch 142217-01) or later.

StarOffice 9 (it):
Apply update 3 (patch 142218-01) or later.

StarOffice 9 (fr):
Apply update 3 (patch 142219-01) or later.

StarOffice 9 (sv):
Apply update 3 (patch 142220-01) or later.

StarOffice 9 (nl):
Apply update 3 (patch 142221-01) or later.

StarOffice 9 (hu):
Apply update 3 (patch 142222-01) or later.

StarOffice 9 (ru):
Apply update 3 (patch 142223-01) or later.

StarOffice 9 (pl):
Apply update 3 (patch 142224-01) or later.

StarOffice 9 (pt):
Apply update 3 (patch 142225-01) or later.

StarOffice 9 (pt-BR):
Apply update 3 (patch 142226-01) or later.

StarOffice 9 (en-US, de, es, it, fr, sv, nl, hu, ru, pl, pt, pt-BR,
ar):
Apply update 3 (patch 142227-01) or later.

StarSuite 9 (ja):
Apply update 3 (patch 142228-01) or later.

StarSuite 9 (ko):
Apply update 3 (patch 142229-01) or later.

StarSuite 9 (zh-CN):
Apply update 3 (patch 142230-01) or later.

StarSuite 9 (zh-TW):
Apply update 3 (patch 142231-01) or later.

StarSuite 9 (en-US, ja, ko, zh-CN, zh-TW):
Apply update 3 (patch142232-01) or later.

ORIGINAL ADVISORY:
https://sunsolve.sun.com/search/document.do?assetkey=1-66-266088-1

OTHER REFERENCES:
SA36631:
https://secunia.com/advisories/36631/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
https://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
https://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------