CVE-2007-0245: openoffice

CVSS: 9.3v2.0HighModified

AliasesRHSA-2007:0406DSA-1307-1

Published 12-06-2007Last modified 07-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2007-0245 is a high (CVSS 9.3) vulnerability in openoffice. EPSS estimates a 6.66% chance of exploitation in the next 30 days, higher than 93.8% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

6.66%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

12-06-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Heap-based buffer overflow in OpenOffice.org (OOo) 2.2.1 and earlier allows remote attackers to execute arbitrary code via a RTF file with a crafted prtdata tag with a length parameter inconsistency, which causes vtable entries to be overwritten.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

6.66%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.66% on 18-09-2026

18-09-202618-10-2026

EPSS score

6.66%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

Redhat138 products

openoffice.org< 0:1.1.2-39.2.0.EL3 | < 0:1.1.5-10.6.0.1.EL4 | < 1:2.0.4-5.4.17.2
openoffice.org-base< 1:2.0.4-5.4.17.2
openoffice.org-calc< 1:2.0.4-5.4.17.2
openoffice.org-core< 1:2.0.4-5.4.17.2
openoffice.org-debuginfo< 0:1.1.2-39.2.0.EL3 | < 0:1.1.5-10.6.0.1.EL4 | < 1:2.0.4-5.4.17.2

openoffice.org-draw< 1:2.0.4-5.4.17.2
openoffice.org-emailmerge< 1:2.0.4-5.4.17.2
openoffice.org-graphicfilter< 1:2.0.4-5.4.17.2
openoffice.org-i18n< 0:1.1.2-39.2.0.EL3 | < 0:1.1.5-10.6.0.1.EL4
openoffice.org-impress< 1:2.0.4-5.4.17.2
openoffice.org-javafilter< 1:2.0.4-5.4.17.2
openoffice.org-kde< 0:1.1.5-10.6.0.1.EL4
openoffice.org-langpack-af_ZA< 1:2.0.4-5.4.17.2
openoffice.org-langpack-ar< 1:2.0.4-5.4.17.2
openoffice.org-langpack-as_IN< 1:2.0.4-5.4.17.2
openoffice.org-langpack-bg_BG< 1:2.0.4-5.4.17.2
openoffice.org-langpack-bn< 1:2.0.4-5.4.17.2
openoffice.org-langpack-ca_ES< 1:2.0.4-5.4.17.2
openoffice.org-langpack-cs_CZ< 1:2.0.4-5.4.17.2
openoffice.org-langpack-cy_GB< 1:2.0.4-5.4.17.2
openoffice.org-langpack-da_DK< 1:2.0.4-5.4.17.2
openoffice.org-langpack-de< 1:2.0.4-5.4.17.2
openoffice.org-langpack-el_GR< 1:2.0.4-5.4.17.2
openoffice.org-langpack-es< 1:2.0.4-5.4.17.2
openoffice.org-langpack-et_EE< 1:2.0.4-5.4.17.2
openoffice.org-langpack-eu_ES< 1:2.0.4-5.4.17.2
openoffice.org-langpack-fi_FI< 1:2.0.4-5.4.17.2
openoffice.org-langpack-fr< 1:2.0.4-5.4.17.2
openoffice.org-langpack-ga_IE< 1:2.0.4-5.4.17.2
openoffice.org-langpack-gl_ES< 1:2.0.4-5.4.17.2
openoffice.org-langpack-gu_IN< 1:2.0.4-5.4.17.2
openoffice.org-langpack-he_IL< 1:2.0.4-5.4.17.2
openoffice.org-langpack-hi_IN< 1:2.0.4-5.4.17.2
openoffice.org-langpack-hr_HR< 1:2.0.4-5.4.17.2
openoffice.org-langpack-hu_HU< 1:2.0.4-5.4.17.2
openoffice.org-langpack-it< 1:2.0.4-5.4.17.2
openoffice.org-langpack-ja_JP< 1:2.0.4-5.4.17.2
openoffice.org-langpack-kn_IN< 1:2.0.4-5.4.17.2
openoffice.org-langpack-ko_KR< 1:2.0.4-5.4.17.2
openoffice.org-langpack-lt_LT< 1:2.0.4-5.4.17.2
openoffice.org-langpack-ml_IN< 1:2.0.4-5.4.17.2
openoffice.org-langpack-mr_IN< 1:2.0.4-5.4.17.2
openoffice.org-langpack-ms_MY< 1:2.0.4-5.4.17.2
openoffice.org-langpack-nb_NO< 1:2.0.4-5.4.17.2
openoffice.org-langpack-nl< 1:2.0.4-5.4.17.2
openoffice.org-langpack-nn_NO< 1:2.0.4-5.4.17.2
openoffice.org-langpack-nr_ZA< 1:2.0.4-5.4.17.2
openoffice.org-langpack-nso_ZA< 1:2.0.4-5.4.17.2
openoffice.org-langpack-or_IN< 1:2.0.4-5.4.17.2
openoffice.org-langpack-pa_IN< 1:2.0.4-5.4.17.2
openoffice.org-langpack-pl_PL< 1:2.0.4-5.4.17.2
openoffice.org-langpack-pt_BR< 1:2.0.4-5.4.17.2
openoffice.org-langpack-pt_PT< 1:2.0.4-5.4.17.2
openoffice.org-langpack-ru< 1:2.0.4-5.4.17.2
openoffice.org-langpack-sk_SK< 1:2.0.4-5.4.17.2
openoffice.org-langpack-sl_SI< 1:2.0.4-5.4.17.2
openoffice.org-langpack-sr_CS< 1:2.0.4-5.4.17.2
openoffice.org-langpack-ss_ZA< 1:2.0.4-5.4.17.2
openoffice.org-langpack-st_ZA< 1:2.0.4-5.4.17.2
openoffice.org-langpack-sv< 1:2.0.4-5.4.17.2
openoffice.org-langpack-ta_IN< 1:2.0.4-5.4.17.2
openoffice.org-langpack-te_IN< 1:2.0.4-5.4.17.2
openoffice.org-langpack-th_TH< 1:2.0.4-5.4.17.2
openoffice.org-langpack-tn_ZA< 1:2.0.4-5.4.17.2
openoffice.org-langpack-tr_TR< 1:2.0.4-5.4.17.2
openoffice.org-langpack-ts_ZA< 1:2.0.4-5.4.17.2
openoffice.org-langpack-ur< 1:2.0.4-5.4.17.2
openoffice.org-langpack-ve_ZA< 1:2.0.4-5.4.17.2
openoffice.org-langpack-xh_ZA< 1:2.0.4-5.4.17.2
openoffice.org-langpack-zh_CN< 1:2.0.4-5.4.17.2
openoffice.org-langpack-zh_TW< 1:2.0.4-5.4.17.2
openoffice.org-langpack-zu_ZA< 1:2.0.4-5.4.17.2
openoffice.org-libs< 0:1.1.2-39.2.0.EL3 | < 0:1.1.5-10.6.0.1.EL4
openoffice.org-math< 1:2.0.4-5.4.17.2
openoffice.org-pyuno< 1:2.0.4-5.4.17.2
openoffice.org-testtools< 1:2.0.4-5.4.17.2
openoffice.org-writer< 1:2.0.4-5.4.17.2
openoffice.org-xsltfilter< 1:2.0.4-5.4.17.2
openoffice.org2< 1:2.0.4-5.7.0.1.0
openoffice.org2-base< 1:2.0.4-5.7.0.1.0
openoffice.org2-calc< 1:2.0.4-5.7.0.1.0
openoffice.org2-core< 1:2.0.4-5.7.0.1.0
openoffice.org2-debuginfo< 1:2.0.4-5.7.0.1.0
openoffice.org2-draw< 1:2.0.4-5.7.0.1.0
openoffice.org2-emailmerge< 1:2.0.4-5.7.0.1.0
openoffice.org2-graphicfilter< 1:2.0.4-5.7.0.1.0
openoffice.org2-impress< 1:2.0.4-5.7.0.1.0
openoffice.org2-javafilter< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-af_ZA< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-ar< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-bg_BG< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-bn< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-ca_ES< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-cs_CZ< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-cy_GB< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-da_DK< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-de< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-el_GR< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-es< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-et_EE< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-eu_ES< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-fi_FI< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-fr< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-ga_IE< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-gl_ES< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-gu_IN< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-he_IL< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-hi_IN< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-hr_HR< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-hu_HU< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-it< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-ja_JP< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-ko_KR< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-lt_LT< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-ms_MY< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-nb_NO< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-nl< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-nn_NO< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-pa_IN< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-pl_PL< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-pt_BR< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-pt_PT< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-ru< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-sk_SK< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-sl_SI< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-sr_CS< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-sv< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-ta_IN< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-th_TH< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-tr_TR< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-zh_CN< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-zh_TW< 1:2.0.4-5.7.0.1.0
openoffice.org2-langpack-zu_ZA< 1:2.0.4-5.7.0.1.0
openoffice.org2-math< 1:2.0.4-5.7.0.1.0
openoffice.org2-pyuno< 1:2.0.4-5.7.0.1.0
openoffice.org2-testtools< 1:2.0.4-5.7.0.1.0
openoffice.org2-writer< 1:2.0.4-5.7.0.1.0
openoffice.org2-xsltfilter< 1:2.0.4-5.7.0.1.0

Show all 138

Debian1 product

openoffice.org< 1.1.3-9sarge7 | < 2.0.4.dfsg.2-7etch1

Openoffice1 product

openoffice≤ 2.2.1

3 vendors · 140 products

References

34 links

secunia.com/advisories/25648Third Party AdvisoryX Refsource SECUNIAVendor Advisory
issues.rpath.com/browse/RPL-1570X Refsource CONFIRM
www.vupen.com/english/advisories/2007/2229VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/25894Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/26476Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securitytracker.com/id?1018239VDB EntryX Refsource SECTRACK
secunia.com/advisories/25705Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.ubuntu.com/usn/usn-482-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/25862Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2007:144Vendor AdvisoryX Refsource MANDRIVA

Show all 34 references

sw.openoffice.org/source/browse/sw/sw/source/filter/rtf/swparrtf.cxx?rev=1.67X Refsource CONFIRM
www.securityfocus.com/archive/1/471274/100/0/threadedMailing ListX Refsource BUGTRAQ
www.debian.org/security/2007/dsa-1307Vendor AdvisoryX Refsource DEBIANPatch
sunsolve.sun.com/search/document.do?assetkey=1-26-102917-1Vendor AdvisoryX Refsource SUNALERT
secunia.com/advisories/26010Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2007/2166VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/26022Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.gentoo.org/security/en/glsa/glsa-200707-02.xmlVendor AdvisoryX Refsource GENTOO
www.redhat.com/support/errata/RHSA-2007-0406.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/25673Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.novell.com/linux/security/advisories/2007_37_openoffice.htmlVendor AdvisoryX Refsource SUSE
exchange.xforce.ibmcloud.com/vulnerabilities/34843VDB EntryX Refsource XF
www.securityfocus.com/bid/24450VDB EntryX Refsource BID
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10002VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/25650Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/25905Third Party AdvisoryX Refsource SECUNIAVendor Advisory
osvdb.org/35378VDB EntryX Refsource OSVDB
access.redhat.com/errata/RHSA-2007:0406Advisory
www.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=242004REPORT
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0406.jsonAdvisory
access.redhat.com/security/cve/CVE-2007-0245REPORT
www.cve.org/CVERecord?id=CVE-2007-0245Advisory
nvd.nist.gov/vuln/detail/CVE-2007-0245Advisory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities