CVE-2007-0239

CVSS: 9.3v2.0HighModified

Published 21-03-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-0239 is a high (CVSS 9.3) vulnerability. EPSS estimates a 3.59% chance of exploitation in the next 30 days, higher than 89.2% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

3.59%

0%100%

Low · +0.11 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4 · Related 1

DSA-1270-1 OPENSUSE-SU-2024:10983-1 RHSA-2007:0033 RHSA-2007:0069

Timeline

21-03-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

3.59%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

+0.11 pp

From 3.48% on 18-09-2026

18-09-202618-10-2026

EPSS score

3.59%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

No affected systems are recorded for this record.

References

25 links

www.gentoo.org/security/en/glsa/glsa-200704-12.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/24588Third Party AdvisoryX Refsource SECUNIA
issues.foresightlinux.org/browse/FL-211X Refsource CONFIRM
www.securityfocus.com/bid/22812VDB EntryX Refsource BID
secunia.com/advisories/24810Third Party AdvisoryX Refsource SECUNIA
lists.suse.com/archive/suse-security-announce/2007-Mar/0007.htmlVendor AdvisoryX Refsource SUSE
www.redhat.com/support/errata/RHSA-2007-0033.htmlVendor AdvisoryX Refsource REDHAT
www.vupen.com/english/advisories/2007/1032VDB EntryX Refsource VUPEN
www.ubuntu.com/usn/usn-444-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/24613Third Party AdvisoryX Refsource SECUNIA

Show all 25 references

secunia.com/advisories/24676Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/24550Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/24465Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2007/dsa-1270Vendor AdvisoryX Refsource DEBIAN
www.mandriva.com/security/advisories?name=MDKSA-2007:073Vendor AdvisoryX Refsource MANDRIVA
exchange.xforce.ibmcloud.com/vulnerabilities/33113VDB EntryX Refsource XF
secunia.com/advisories/24646Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id?1017799VDB EntryX Refsource SECTRACK
www.redhat.com/support/errata/RHSA-2007-0069.htmlVendor AdvisoryX Refsource REDHAT
sunsolve.sun.com/search/document.do?assetkey=1-26-102807-1Vendor AdvisoryX Refsource SUNALERT
secunia.com/advisories/24647Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2007/1117VDB EntryX Refsource VUPEN
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11422VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/24906Third Party AdvisoryX Refsource SECUNIA
issues.rpath.com/browse/RPL-1118X Refsource CONFIRM