CVE-2007-0238 Stack-based buffer overflow in filter\starcalc\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to ex...
HighCVSS 9.3
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in filter\starcalc\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to execute arbitrary code via a document with a long Note.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openoffice | All versions | No fix listed |
References
- SUSE-SA:2007:023 vendor-advisory
- 24465 third-party-advisory vendor-advisory
- 24550 third-party-advisory vendor-advisory
- 24588 third-party-advisory vendor-advisory
- 24613 third-party-advisory vendor-advisory
- 24646 third-party-advisory vendor-advisory
- 24647 third-party-advisory vendor-advisory
- 24676 third-party-advisory vendor-advisory
- 24810 third-party-advisory vendor-advisory
- 24906 third-party-advisory vendor-advisory
- 102794 vendor-advisory
- DSA-1270 vendor-advisory
- GLSA-200704-12 vendor-advisory
- MDKSA-2007:073 vendor-advisory
- www.ngssoftware.com
- www.openoffice.org
- RHSA-2007:0033 vendor-advisory
- RHSA-2007:0069 vendor-advisory
- 20070404 High Risk Vulnerability in OpenOffice mailing-list
- 23067 vdb-entry
- 1017799 vdb-entry
- USN-444-1 vendor-advisory
- ADV-2007-1032 vdb-entry vendor-advisory
- ADV-2007-1117 vdb-entry vendor-advisory
- openoffice-starcalc-bo(33112) vdb-entry
- issues.foresightlinux.org
- issues.rpath.com
- oval:org.mitre.oval:def:8968 signature vdb-entry