9.3

CVE-2007-2834

Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apache ≫ Openoffice Version < 2.3.0
Sun ≫ Staroffice Version6.0
Sun ≫ Staroffice Version7.0
Sun ≫ Staroffice Version8.0
Debian ≫ Debian Linux Version3.1
Debian ≫ Debian Linux Version4.0
Canonical ≫ Ubuntu Linux Version6.06
Canonical ≫ Ubuntu Linux Version6.10
Canonical ≫ Ubuntu Linux Version7.04
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 11.32% 0.954
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

http://bugs.gentoo.org/show_bug.cgi?id=192818
Third Party Advisory
Issue Tracking
http://fedoranews.org/updates/FEDORA-2007-237.shtml
Third Party Advisory
Broken Link
http://fedoranews.org/updates/FEDORA-2007-700.shtml
Third Party Advisory
Broken Link
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=593
Third Party Advisory
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2007-09/msg00002.html
Third Party Advisory
Mailing List
http://secunia.com/advisories/26816
Third Party Advisory
http://secunia.com/advisories/26817
Third Party Advisory
http://secunia.com/advisories/26839
Third Party Advisory
http://secunia.com/advisories/26844
Third Party Advisory
http://secunia.com/advisories/26855
Third Party Advisory
http://secunia.com/advisories/26861
Third Party Advisory
http://secunia.com/advisories/26891
Third Party Advisory
http://secunia.com/advisories/26903
Third Party Advisory
http://secunia.com/advisories/26912
Third Party Advisory
http://secunia.com/advisories/27077
Third Party Advisory
http://secunia.com/advisories/27087
Third Party Advisory
http://secunia.com/advisories/27370
Third Party Advisory
http://security.gentoo.org/glsa/glsa-200710-24.xml
Third Party Advisory
http://securitytracker.com/id?1018702
Third Party Advisory
VDB Entry
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102994-1
Third Party Advisory
Broken Link
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200190-1
Third Party Advisory
Broken Link
http://www.debian.org/security/2007/dsa-1375
Patch
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:186
Third Party Advisory
URL Repurposed
http://www.openoffice.org/security/cves/CVE-2007-2834.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2007-0848.html
Third Party Advisory
http://www.securityfocus.com/archive/1/479965/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/25690
Patch
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/usn-524-1
Third Party Advisory
Broken Link
http://www.vupen.com/english/advisories/2007/3184
Third Party Advisory
http://www.vupen.com/english/advisories/2007/3262
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/36656
Third Party Advisory
VDB Entry
https://issues.rpath.com/browse/RPL-1740
Third Party Advisory
Broken Link
Issue Tracking
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9967
Third Party Advisory