CVE-2007-2834
Publicada el · Actualizada el
8Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 12%
probabilidad de explotación
12%top 4% de las CVE
explotación observada
noninguna fuente lo reporta
Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.
Productos afectados
n/a · n/aReferencias
http://bugs.gentoo.org/show_bug.cgi?id=192818http://fedoranews.org/updates/FEDORA-2007-237.shtmlhttp://fedoranews.org/updates/FEDORA-2007-700.shtmlhttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=593http://lists.opensuse.org/opensuse-security-announce/2007-09/msg00002.htmlhttp://secunia.com/advisories/26816http://secunia.com/advisories/26817http://secunia.com/advisories/26839http://secunia.com/advisories/26844http://secunia.com/advisories/26855http://secunia.com/advisories/26861http://secunia.com/advisories/26891