LibreOffice XML Manifest Handling Buffer Overflow Vulnerabilities (Mac OS X)

Summary
This host is installed with LibreOffice and is prone to buffer overflow vulnerabilities.
Impact
Successful exploitation will allow remote attackers to cause a denial of service condition or execute arbitrary code. Impact Level: System/Application
Solution
Upgrade to LibreOffice version 3.5.5 or later, For updates refer to http://www.libreoffice.org/download/
Insight
Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality allows attacker to crash the application via crafted Open Document Tex (.odt) file.
Affected
LibreOffice version before 3.5.5 on Mac OS X
References