CVE-2007-5747 Integer underflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted values that t...
MediumCVSS 6.8
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer underflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted values that trigger an excessive loop and a stack-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun openoffice.org | <= 2.3.0 | No fix listed |
| sun openoffice.org | = 1.1.0 | No fix listed |
| sun openoffice.org | = 2.0.0 | No fix listed |
| sun openoffice.org | = 2.1.0 | No fix listed |
| sun openoffice.org | = 2.2.0 | No fix listed |
References
- 20080417 Multiple Vendor OpenOffice QPRO File Parsing Integer Underflow Vulnerability third-party-advisory
- 29852 third-party-advisory vendor-advisory
- 29864 third-party-advisory vendor-advisory
- 29871 third-party-advisory vendor-advisory
- 29910 third-party-advisory vendor-advisory
- 29913 third-party-advisory vendor-advisory
- 29987 third-party-advisory vendor-advisory
- 30100 third-party-advisory vendor-advisory
- 30179 third-party-advisory vendor-advisory
- GLSA-200805-16 vendor-advisory
- 231601 vendor-advisory
- DSA-1547 patch vendor-advisory
- MDVSA-2008:095 vendor-advisory
- SUSE-SA:2008:023 vendor-advisory
- www.openoffice.org patch
- www.openoffice.org
- www.openoffice.org patch
- RHSA-2008:0175 vendor-advisory
- 28819 vdb-entry
- 1019891 vdb-entry
- USN-609-1 vendor-advisory
- ADV-2008-1253 vdb-entry vendor-advisory
- ADV-2008-1375 vdb-entry vendor-advisory
- bugzilla.redhat.com
- openoffice-quattropro-code-execution(41881) vdb-entry
- oval:org.mitre.oval:def:11298 signature vdb-entry
- FEDORA-2008-3251 vendor-advisory