CVE-2007-0239 OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document.
HighCVSS 9.3
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openoffice | All versions | No fix listed |
References
- SUSE-SA:2007:023 vendor-advisory
- 24465 third-party-advisory
- 24550 third-party-advisory
- 24588 third-party-advisory
- 24613 third-party-advisory
- 24646 third-party-advisory
- 24647 third-party-advisory
- 24676 third-party-advisory
- 24810 third-party-advisory
- 24906 third-party-advisory
- 102807 vendor-advisory
- DSA-1270 vendor-advisory
- GLSA-200704-12 vendor-advisory
- MDKSA-2007:073 vendor-advisory
- RHSA-2007:0033 vendor-advisory
- RHSA-2007:0069 vendor-advisory
- 22812 vdb-entry
- 1017799 vdb-entry
- USN-444-1 vendor-advisory
- ADV-2007-1032 vdb-entry
- ADV-2007-1117 vdb-entry
- openoffice-shell-command-execution(33113) vdb-entry
- issues.foresightlinux.org
- issues.rpath.com
- oval:org.mitre.oval:def:11422 signature vdb-entry