[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96078

 
 

909

 
 

78009

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2007-2834

Date: (C)2007-09-18   (M)2017-10-12
 
CVSS Score: 9.3Access Vector: NETWORK
Exploitability Subscore: 8.6Access Complexity: MEDIUM
Impact Subscore: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE











Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.

Reference:
SECTRACK-1018702
SUNALERT-102994
SUNALERT-200190
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=593
http://www.securityfocus.com/archive/1/archive/1/479965/100/0/threaded
BID-25690
SECUNIA-26816
SECUNIA-26817
SECUNIA-26839
SECUNIA-26844
SECUNIA-26855
SECUNIA-26861
SECUNIA-26891
SECUNIA-26903
SECUNIA-26912
SECUNIA-27077
SECUNIA-27087
SECUNIA-27370
ADV-2007-3184
ADV-2007-3262
DSA-1375
FEDORA-2007-2372
FEDORA-2007-700
GLSA-200710-24
MDKSA-2007:186
RHSA-2007:0848
SUSE-SA:2007:052
USN-524-1
http://bugs.gentoo.org/show_bug.cgi?id=192818
http://www.openoffice.org/security/cves/CVE-2007-2834.html
https://issues.rpath.com/browse/RPL-1740
openoffice-tiff-bo(36656)

CPE    7
cpe:/a:sun:staroffice:8.0
cpe:/a:sun:staroffice:6.0
cpe:/a:sun:staroffice:7.0
cpe:/o:redhat:fedora_core:6
...
CWE    1
CWE-189

© 2013 SecPod Technologies