Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows rem…

Exploit prediction (EPSS)

11.97% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.

CVSS scores

Classification

Weakness

• CWE-190 Integer Overflow or Wraparound

References

• sunsolve.sun.com /search/document.do?assetkey=1-66-200190-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
• bugs.gentoo.org /show_bug.cgi?id=192818 · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/26816 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/26839 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• ubuntu.com /usn/usn-524-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
• issues.rpath.com /browse/RPL-1740 · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/26855 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• securitytracker.com /id?1018702 · vdb-entry, x_refsource_SECTRACK, x_transferred
• sunsolve.sun.com /search/document.do?assetkey=1-26-102994-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
• lists.opensuse.org /opensuse-security-announce/2007-09/msg00002.html · vendor-advisory, x_refsource_SUSE, x_transferred
• secunia.com /advisories/26903 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• security.gentoo.org /glsa/glsa-200710-24.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
• labs.idefense.com /intelligence/vulnerabilities/display.php?id=593 · third-party-advisory, x_refsource_IDEFENSE, x_transferred
• secunia.com /advisories/27370 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• mandriva.com /security/advisories?name=MDKSA-2007:186 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
• vupen.com /english/advisories/2007/3262 · vdb-entry, x_refsource_VUPEN, x_transferred
• openoffice.org /security/cves/CVE-2007-2834.html · x_refsource_CONFIRM, x_transferred
• fedoranews.org /updates/FEDORA-2007-700.shtml · vendor-advisory, x_refsource_FEDORA, x_transferred
• redhat.com /support/errata/RHSA-2007-0848.html · vendor-advisory, x_refsource_REDHAT, x_transferred
• secunia.com /advisories/26844 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/26891 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• securityfocus.com /archive/1/479965/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
• secunia.com /advisories/27087 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• securityfocus.com /bid/25690 · vdb-entry, x_refsource_BID, x_transferred
• oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9967 · vdb-entry, signature, x_refsource_OVAL, x_transferred
• vupen.com /english/advisories/2007/3184 · vdb-entry, x_refsource_VUPEN, x_transferred
• secunia.com /advisories/26861 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/26817 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• debian.org /security/2007/dsa-1375 · vendor-advisory, x_refsource_DEBIAN, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/36656 · vdb-entry, x_refsource_XF, x_transferred
• secunia.com /advisories/26912 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/27077 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• fedoranews.org /updates/FEDORA-2007-237.shtml · vendor-advisory, x_refsource_FEDORA, x_transferred

Sources

• CVE List: CVE-2007-2834
• NVD: CVE-2007-2834

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.