National Cyber Awareness System

Vulnerability Summary for CVE-2007-2834

Overview

Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BID

Name: 25690

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/25690

External Source: CONFIRM

Name: http://www.openoffice.org/security/cves/CVE-2007-2834.html

Type: Patch Information

Hyperlink:http://www.openoffice.org/security/cves/CVE-2007-2834.html

External Source: DEBIAN

Name: DSA-1375

Type: Patch Information

Hyperlink:http://www.debian.org/security/2007/dsa-1375

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-1740

Hyperlink:https://issues.rpath.com/browse/RPL-1740

External Source: XF

Name: openoffice-tiff-bo(36656)

Hyperlink:http://xforce.iss.net/xforce/xfdb/36656

External Source: VUPEN

Name: ADV-2007-3262

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2007/3262

External Source: VUPEN

Name: ADV-2007-3184

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2007/3184

External Source: UBUNTU

Name: USN-524-1

Hyperlink:http://www.ubuntu.com/usn/usn-524-1

External Source: BUGTRAQ

Name: 20070919 FLEA-2007-0056-1 openoffice.org

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/479965/100/0/threaded

External Source: REDHAT

Name: RHSA-2007:0848

Type: Advisory

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0848.html

External Source: MANDRIVA

Name: MDKSA-2007:186

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:186

External Source: SUNALERT

Name: 200190

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-66-200190-1

External Source: SUNALERT

Name: 102994

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102994-1

External Source: SECTRACK

Name: 1018702

Hyperlink:http://securitytracker.com/id?1018702

External Source: GENTOO

Name: GLSA-200710-24

Hyperlink:http://security.gentoo.org/glsa/glsa-200710-24.xml

External Source: SECUNIA

Name: 27370

Type: Advisory

Hyperlink:http://secunia.com/advisories/27370

External Source: SECUNIA

Name: 27087

Type: Advisory

Hyperlink:http://secunia.com/advisories/27087

External Source: SECUNIA

Name: 27077

Type: Advisory

Hyperlink:http://secunia.com/advisories/27077

External Source: SECUNIA

Name: 26912

Type: Advisory

Hyperlink:http://secunia.com/advisories/26912

External Source: SECUNIA

Name: 26903

Type: Advisory

Hyperlink:http://secunia.com/advisories/26903

External Source: SECUNIA

Name: 26891

Type: Advisory

Hyperlink:http://secunia.com/advisories/26891

External Source: SECUNIA

Name: 26861

Type: Advisory

Hyperlink:http://secunia.com/advisories/26861

External Source: SECUNIA

Name: 26855

Type: Advisory

Hyperlink:http://secunia.com/advisories/26855

External Source: SECUNIA

Name: 26844

Type: Advisory

Hyperlink:http://secunia.com/advisories/26844

External Source: SECUNIA

Name: 26839

Type: Advisory

Hyperlink:http://secunia.com/advisories/26839

External Source: SECUNIA

Name: 26817

Type: Advisory

Hyperlink:http://secunia.com/advisories/26817

External Source: SECUNIA

Name: 26816

Type: Advisory

Hyperlink:http://secunia.com/advisories/26816

External Source: OVAL

Name: oval:org.mitre.oval:def:9967

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9967

External Source: SUSE

Name: SUSE-SA:2007:052

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2007-09/msg00002.html

External Source: IDEFENSE

Name: 20070917 Multiple Vendor OpenOffice TIFF File Parsing Multiple Integer Overflow Vulnerabilities

Hyperlink:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=593

External Source: FEDORA

Name: FEDORA-2007-700

Hyperlink:http://fedoranews.org/updates/FEDORA-2007-700.shtml

External Source: FEDORA

Name: FEDORA-2007-2372

Hyperlink:http://fedoranews.org/updates/FEDORA-2007-237.shtml

External Source: CONFIRM

Name: http://bugs.gentoo.org/show_bug.cgi?id=192818

Hyperlink:http://bugs.gentoo.org/show_bug.cgi?id=192818

References to Check Content

Identifier:oval:org.mitre.oval:def:9967

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:9967