9.3

CVE-2007-0238

Stack-based buffer overflow in filter\starcalc\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to execute arbitrary code via a document with a long Note.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.75% 0.921
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html
http://secunia.com/advisories/24465
Vendor Advisory
http://secunia.com/advisories/24588
Vendor Advisory
http://secunia.com/advisories/24613
Vendor Advisory
http://secunia.com/advisories/24906
Vendor Advisory
http://www.debian.org/security/2007/dsa-1270
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml
http://www.vupen.com/english/advisories/2007/1032
Vendor Advisory
http://secunia.com/advisories/24550
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2007-0033.html
http://secunia.com/advisories/24646
Vendor Advisory
http://secunia.com/advisories/24647
Vendor Advisory
http://secunia.com/advisories/24676
Vendor Advisory
http://secunia.com/advisories/24810
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102794-1
http://www.mandriva.com/security/advisories?name=MDKSA-2007:073
http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-openoffice-suite/
http://www.openoffice.org/security/CVE-2007-0238
http://www.redhat.com/support/errata/RHSA-2007-0069.html
http://www.securityfocus.com/archive/1/464724/100/0/threaded
http://www.securityfocus.com/bid/23067
http://www.securitytracker.com/id?1017799
http://www.ubuntu.com/usn/usn-444-1
http://www.vupen.com/english/advisories/2007/1117
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33112
https://issues.foresightlinux.org/browse/FL-211
https://issues.rpath.com/browse/RPL-1118
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8968