SUSE Security Announcement SUSE-SA:2006:040 – Multiple vulnerabilities have been discovered in OpenOffice. A security vulnerability in OpenOffice.org may make it possible to inject basic code into documents which is executed upon loading of the document. A security vulnerability related to OpenOffice.org documents may allow certain Java applets to break through the “sandbox” and therefore have full access to system resources with current user privileges. A buffer overflow in the XML UTF8 converter allows for a value to be written to an arbitrary location in memory. This may lead to command execution in the context of the current user.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/48049/SUSE-SA-2006-040.txt
Source: https://packetstormsecurity.com/files/48049/SUSE-SA-2006-040.txt.html