[Full-disclosure] fun of openoffice

[alert7 at xfocus.org]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

find a fun of openoffice 1.9.104

[alert7 at FC4 ~]$ touch ..\\..\\..\\etc\\passwd
[alert7 at FC4 ~]$ cat ..\\..\\..\\etc\\passwd
[alert7 at FC4 ~]$ ooffice ..\\..\\..\\etc\\passwd
/etc/passwd will be open.

fun bug :)

- --

Kind Regards,

- ---
alert7 at xfocus.org

XFOCUS Security Team
http://www.xfocus.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFEAHfYsIGFlQFVy00RAqjZAJ9UdMKUkJ8YsTTe9S91DqIsqOux8wCgg1o1
3pngDZPupsSwAFVWgRBFdIo=
=+vlE
-----END PGP SIGNATURE-----