Description
Integer overflow in the KPresenter import filter for Microsoft PowerPoint files (filters/olefilters/lib/klaola.cc) in KOffice before 1.6.1 allows user-assisted remote attackers to execute arbitrary code via a crafted PPT file, which results in a heap-based buffer overflow.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 2 | koffice +1 | 3:1.1.1-2.3 | RHSA-2007:0010 |
Advisories 1
- RHSA-2007:0010 Red Hat Security Advisory: koffice security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- ADV-2006-4771 vdb-entry
- 23220 third-party-advisory
- 23143 third-party-advisory
- 21354 vdb-entry
- http://websvn.kde.org/branches/koffice/1.6/koffice/filters/olefilters/lib/klaola.cc?rev=607037&r1=566347&r2=607037
- 1017318 vdb-entry
- 23409 third-party-advisory
- 24218 third-party-advisory
- USN-388-1 vendor-advisory
- MDKSA-2006:222 vendor-advisory
- GLSA-200612-05 vendor-advisory
- RHSA-2007:0010 vendor-advisory
- 20061205 [KOffice security advisory] KOffice OLEfilter integer overflow mailing-list
- http://www.koffice.org/announcements/changelog-1.6.1.php
- SUSE-SR:2006:029 vendor-advisory
- koffice-readbigblockdepot-overflow(30624) vdb-entry
- 23162 third-party-advisory
- http://www.kde.org/info/security/advisory-20061204-1.txt