OpenOffice.org developers are shipped new fix for highly critical vulnerability that affects versions 2.0 to 2.4 of OpenOffice suite. According to the report the flaw could be exploited to launch code execution attacks with manipulated document files and lead to heap overflows and allow a remote unprivileged user who provides a OpenOffice.org document that is opened by a local user to execute arbitrary commands on the system with the privileges of the user running OpenOffice.org.

Hackers have managed to spread the links for fake ImageShack site that infects the visitors with Backdoor.Win32.SdBot malware. The links to the infected images are distributed via MSN messages where users are asked to check out the photo linked to the fake imageshack address. The message format is like this:

!msn.msg lool!! http ://imageshaack.org /img/Picture275.jpg |!trition.msg lool!! http ://imageshaack.org/img /Picture275.jpg topic set by Everglades on Wed Jun 11 15:41:57

“!msn.msg Haha is that you;)? http ://imageshaack.org /img/Picture275.jpg?|!trition.msg http: //imageshaack.org/img /Picture275.jpg

MSN users are strongly advised to check the links they get via IM and not get fooled with fake websites that spread malware.