CVE-2007-4575 HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via crafted database documents, related to "exposing static....
HighCVSS 9.3
EPSS 14.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via crafted database documents, related to "exposing static java methods."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openoffice | <= 2.3 | No fix listed |
| openoffice | = 2.0.1 | No fix listed |
| openoffice | = 2.0.2 | No fix listed |
| openoffice | = 2.0.3 | No fix listed |
| openoffice | = 2.0.3_1 | No fix listed |
| openoffice | = 2.0.4 | No fix listed |
| openoffice | = 2.0beta | No fix listed |
| openoffice | = 2.1 | No fix listed |
| openoffice | = 2.2 | No fix listed |
| openoffice | = 2.2.1 | No fix listed |
| debian/hsqldb(Debian:12) | < 1.8.0.9-1 | 1.8.0.9-1 |
| debian/hsqldb(Debian:13) | < 1.8.0.9-1 | 1.8.0.9-1 |
| debian/hsqldb(Debian:14) | < 1.8.0.9-1 | 1.8.0.9-1 |
References
- bugs.gentoo.org
- bugs.gentoo.org
- SUSE-SA:2007:067 vendor-advisory
- 27914 third-party-advisory vendor-advisory
- 27916 third-party-advisory vendor-advisory
- 27928 patch third-party-advisory vendor-advisory
- 27931 third-party-advisory vendor-advisory
- 27972 third-party-advisory vendor-advisory
- 28018 third-party-advisory vendor-advisory
- 28039 third-party-advisory vendor-advisory
- 28286 third-party-advisory vendor-advisory
- 28585 third-party-advisory vendor-advisory
- 30100 third-party-advisory vendor-advisory
- 103141 vendor-advisory
- 200637 vendor-advisory
- DSA-1419 vendor-advisory
- GLSA-200712-25 vendor-advisory
- MDVSA-2008:095 vendor-advisory
- www.openoffice.org patch vendor-advisory
- FEDORA-2007-4120 vendor-advisory
- FEDORA-2007-4172 vendor-advisory
- FEDORA-2007-762 vendor-advisory
- RHSA-2007:1048 vendor-advisory
- RHSA-2007:1090 vendor-advisory
- RHSA-2008:0151 vendor-advisory
- RHSA-2008:0158 vendor-advisory
- RHSA-2008:0213 vendor-advisory
- 26703 patch vdb-entry
- 1019041 vdb-entry
- USN-609-1 vendor-advisory
- ADV-2007-4092 vdb-entry vendor-advisory
- ADV-2007-4146 vdb-entry vendor-advisory
- openoffice-hsqldb-code-execution(38882) vdb-entry
- oval:org.mitre.oval:def:10153 signature vdb-entry
- FEDORA-2007-4171 vendor-advisory
- FEDORA-2007-4119 vendor-advisory
- Debian Security Tracker CVE-2007-4575 vendor-advisory