CVE-2007-2834
Published Sep 18, 2007
Last updated 3 years ago
Overview
- Description
- Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 9.3
- Impact score
- 10
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-190
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A43B53AA-65DC-4C8E-B9D8-BB5DA4FDD3B6",
"versionEndExcluding": "2.3.0"
},
{
"criteria": "cpe:2.3:a:sun:staroffice:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA77A764-8311-4108-8155-920EC12AC0F7"
},
{
"criteria": "cpe:2.3:a:sun:staroffice:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ECB60F92-5543-4D1E-8CE1-525D65AECF5E"
},
{
"criteria": "cpe:2.3:a:sun:staroffice:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E7D51979-56BC-46A4-A6FB-45BC56CB6D5B"
},
{
"criteria": "cpe:2.3:a:sun:starsuite:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28296FE1-DE90-4CB7-94CF-ED73C3AD8BE7"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "23E304C9-F780-4358-A58D-1E4C93977704"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6EBDAFF8-DE44-4E80-B6BD-E341F767F501"
}
],
"operator": "OR"
}
]
}
]