CVE-2007-2834

CVE-2007-2834

Published · Updated

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 12%
exploitation probability
12%top 4% of all CVEs
observed exploitation
nono source reports it
Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.
Affected products
n/a · n/a
References
http://bugs.gentoo.org/show_bug.cgi?id=192818http://fedoranews.org/updates/FEDORA-2007-237.shtmlhttp://fedoranews.org/updates/FEDORA-2007-700.shtmlhttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=593http://lists.opensuse.org/opensuse-security-announce/2007-09/msg00002.htmlhttp://secunia.com/advisories/26816http://secunia.com/advisories/26817http://secunia.com/advisories/26839http://secunia.com/advisories/26844http://secunia.com/advisories/26855http://secunia.com/advisories/26861http://secunia.com/advisories/26891