CVE Database
/

CVE-2007-2834

Back to search

CVE-2007-2834

Published: Sep 18, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.

VendorProductVersions

n/a

n/a

affected
n/a

References

200190
vendor-advisory
x_refsource_SUNALERT
26816
third-party-advisory
x_refsource_SECUNIA
26839
third-party-advisory
x_refsource_SECUNIA
USN-524-1
vendor-advisory
x_refsource_UBUNTU
26855
third-party-advisory
x_refsource_SECUNIA
1018702
vdb-entry
x_refsource_SECTRACK
102994
vendor-advisory
x_refsource_SUNALERT
SUSE-SA:2007:052
vendor-advisory
x_refsource_SUSE
26903
third-party-advisory
x_refsource_SECUNIA
GLSA-200710-24
vendor-advisory
x_refsource_GENTOO
27370
third-party-advisory
x_refsource_SECUNIA
MDKSA-2007:186
vendor-advisory
x_refsource_MANDRIVA
ADV-2007-3262
vdb-entry
x_refsource_VUPEN
FEDORA-2007-700
vendor-advisory
x_refsource_FEDORA
RHSA-2007:0848
vendor-advisory
x_refsource_REDHAT
26844
third-party-advisory
x_refsource_SECUNIA
26891
third-party-advisory
x_refsource_SECUNIA
20070919 FLEA-2007-0056-1 openoffice.org
mailing-list
x_refsource_BUGTRAQ
27087
third-party-advisory
x_refsource_SECUNIA
25690
vdb-entry
x_refsource_BID
oval:org.mitre.oval:def:9967
vdb-entry
signature
x_refsource_OVAL
ADV-2007-3184
vdb-entry
x_refsource_VUPEN
26861
third-party-advisory
x_refsource_SECUNIA
26817
third-party-advisory
x_refsource_SECUNIA
DSA-1375
vendor-advisory
x_refsource_DEBIAN
openoffice-tiff-bo(36656)
vdb-entry
x_refsource_XF
26912
third-party-advisory
x_refsource_SECUNIA
27077
third-party-advisory
x_refsource_SECUNIA
FEDORA-2007-2372
vendor-advisory
x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now