http://news.zdnet.co.uk/security/0,1000000189,39289620,00.htm
Security experts have discovered TIFF-based buffer overflow vulnerabilities in OpenOffice.org that could allow attackers to remotely execute code on Linux, Windows or Apple Mac-based computers.
OpenOffice version 2.0.4 and prior are vulnerable to maliciously crafted TIFF files, which can be delivered in an email attachment, published on a website or shared using P2P software. The next version of OpenOffice (version 2.3) arrived on 17 September and is not affected by the flaw.
The vulnerability was discovered by researchers at iDefense, who claim that the OpenOffice TIFF parsing code is flawed.
Patching your applications is just as important as patching the operating system and just because an application/operating system is open source should not be used as a way of limiting your liability/patching due diligence.
![[Post to Twitter]](http://www.bladewatch.com/wp-content/plugins/tweet-this/icons/tt-twitter.png){kind=icon}
