OpenOffice worm harbors malware, spyware

Its a good thing Symantec has a product like Norton Internet Security to reference in the security notices!

I found some converted open source stuff but I don't know if thy will catch this thing

zebra scanner 2.02 http://home.wanadoo.nl/denheyer/webpaginas/ZebraDocumentation.html This does not remove anything but can tell you if anything is hinkey. It looks similar to such windows products as Icesword. On the bright side these kinds of programs are very powerful if you know how to use them because they are independant of updates and are capable of cathhing zero day stuff. but again no removal and little automation.

ClamXav http://www.clamxav.com/ is an open source antivirus program. As the OOo worm affects linux as well I think it likely that it will catch it on macs as well. It would be nice to know for sure though

or just the x11 openoffice?

Is this not an example of the idiocy of using P2P more than a specific example of Open Office vulernabilities?

C'mon open source gurus. You're supposed to have saved the world from this kind of stuff by now!

...to see the technicals on this thing. Is this security warning implying that this spyware and malware *runs* on OSX (or linux for that matter)? To bundle installers and applications for three different OSeseses in one document would be quite a feat.

Symantec has nothing on their site regarding the technical details.

isn't this the software when installed creates a bigger security hole in OSX?

Unfortunately Open Office documents can have macros like MS Office documents and so this was always a possibility. Lucky for me I use an HTML editor for short documents, LaTeX for long documents and Pages for desktop publishing, so I can get rid of Open Office.org. I wish I could find a Linux distribution without OpenOffice.org. As far as NeoOffice is concerned and this also applies to OpenOffice.org on Suse Linux, not only are they vulnerable to this kind of exploit, they are also vulnerable to MS Office macro viruses as well as they include partial VBA compatibility.

The problem is, most likely, people are trying so hard to make this a perfect 'office killer' that little things like security concerns tend to concern them not.

Also, the problem with macros is that people want them powerful, then complain when that power can be used in bad ways.

So, in other words, it's the same diet as most other open source projects - all the calories, with none of the flavor.