CVE-2007-2834: apache openoffice Integer Overflow or Wraparound

CVSS: 9.3v2.0HighModified

AliasesRHSA-2007:0848DSA-1375-1

Published 18-09-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-2834 is a high (CVSS 9.3) Integer Overflow or Wraparound vulnerability in apache openoffice. EPSS estimates a 11.97% chance of exploitation in the next 30 days, higher than 96% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

11.97%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

18-09-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

11.97%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 11.97% on 18-09-2026

18-09-202618-10-2026

EPSS score

11.97%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-190Integer Overflow or WraparoundThe product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Affected systems

Redhat138 products

openoffice.org< 0:1.1.2-40.2.0.EL3 | < 0:1.1.5-10.6.0.2.EL4 | < 1:2.0.4-5.4.17.3
openoffice.org-base< 1:2.0.4-5.4.17.3
openoffice.org-calc< 1:2.0.4-5.4.17.3
openoffice.org-core< 1:2.0.4-5.4.17.3
openoffice.org-debuginfo< 0:1.1.2-40.2.0.EL3 | < 0:1.1.5-10.6.0.2.EL4 | < 1:2.0.4-5.4.17.3

openoffice.org-draw< 1:2.0.4-5.4.17.3
openoffice.org-emailmerge< 1:2.0.4-5.4.17.3
openoffice.org-graphicfilter< 1:2.0.4-5.4.17.3
openoffice.org-i18n< 0:1.1.2-40.2.0.EL3 | < 0:1.1.5-10.6.0.2.EL4
openoffice.org-impress< 1:2.0.4-5.4.17.3
openoffice.org-javafilter< 1:2.0.4-5.4.17.3
openoffice.org-kde< 0:1.1.5-10.6.0.2.EL4
openoffice.org-langpack-af_ZA< 1:2.0.4-5.4.17.3
openoffice.org-langpack-ar< 1:2.0.4-5.4.17.3
openoffice.org-langpack-as_IN< 1:2.0.4-5.4.17.3
openoffice.org-langpack-bg_BG< 1:2.0.4-5.4.17.3
openoffice.org-langpack-bn< 1:2.0.4-5.4.17.3
openoffice.org-langpack-ca_ES< 1:2.0.4-5.4.17.3
openoffice.org-langpack-cs_CZ< 1:2.0.4-5.4.17.3
openoffice.org-langpack-cy_GB< 1:2.0.4-5.4.17.3
openoffice.org-langpack-da_DK< 1:2.0.4-5.4.17.3
openoffice.org-langpack-de< 1:2.0.4-5.4.17.3
openoffice.org-langpack-el_GR< 1:2.0.4-5.4.17.3
openoffice.org-langpack-es< 1:2.0.4-5.4.17.3
openoffice.org-langpack-et_EE< 1:2.0.4-5.4.17.3
openoffice.org-langpack-eu_ES< 1:2.0.4-5.4.17.3
openoffice.org-langpack-fi_FI< 1:2.0.4-5.4.17.3
openoffice.org-langpack-fr< 1:2.0.4-5.4.17.3
openoffice.org-langpack-ga_IE< 1:2.0.4-5.4.17.3
openoffice.org-langpack-gl_ES< 1:2.0.4-5.4.17.3
openoffice.org-langpack-gu_IN< 1:2.0.4-5.4.17.3
openoffice.org-langpack-he_IL< 1:2.0.4-5.4.17.3
openoffice.org-langpack-hi_IN< 1:2.0.4-5.4.17.3
openoffice.org-langpack-hr_HR< 1:2.0.4-5.4.17.3
openoffice.org-langpack-hu_HU< 1:2.0.4-5.4.17.3
openoffice.org-langpack-it< 1:2.0.4-5.4.17.3
openoffice.org-langpack-ja_JP< 1:2.0.4-5.4.17.3
openoffice.org-langpack-kn_IN< 1:2.0.4-5.4.17.3
openoffice.org-langpack-ko_KR< 1:2.0.4-5.4.17.3
openoffice.org-langpack-lt_LT< 1:2.0.4-5.4.17.3
openoffice.org-langpack-ml_IN< 1:2.0.4-5.4.17.3
openoffice.org-langpack-mr_IN< 1:2.0.4-5.4.17.3
openoffice.org-langpack-ms_MY< 1:2.0.4-5.4.17.3
openoffice.org-langpack-nb_NO< 1:2.0.4-5.4.17.3
openoffice.org-langpack-nl< 1:2.0.4-5.4.17.3
openoffice.org-langpack-nn_NO< 1:2.0.4-5.4.17.3
openoffice.org-langpack-nr_ZA< 1:2.0.4-5.4.17.3
openoffice.org-langpack-nso_ZA< 1:2.0.4-5.4.17.3
openoffice.org-langpack-or_IN< 1:2.0.4-5.4.17.3
openoffice.org-langpack-pa_IN< 1:2.0.4-5.4.17.3
openoffice.org-langpack-pl_PL< 1:2.0.4-5.4.17.3
openoffice.org-langpack-pt_BR< 1:2.0.4-5.4.17.3
openoffice.org-langpack-pt_PT< 1:2.0.4-5.4.17.3
openoffice.org-langpack-ru< 1:2.0.4-5.4.17.3
openoffice.org-langpack-sk_SK< 1:2.0.4-5.4.17.3
openoffice.org-langpack-sl_SI< 1:2.0.4-5.4.17.3
openoffice.org-langpack-sr_CS< 1:2.0.4-5.4.17.3
openoffice.org-langpack-ss_ZA< 1:2.0.4-5.4.17.3
openoffice.org-langpack-st_ZA< 1:2.0.4-5.4.17.3
openoffice.org-langpack-sv< 1:2.0.4-5.4.17.3
openoffice.org-langpack-ta_IN< 1:2.0.4-5.4.17.3
openoffice.org-langpack-te_IN< 1:2.0.4-5.4.17.3
openoffice.org-langpack-th_TH< 1:2.0.4-5.4.17.3
openoffice.org-langpack-tn_ZA< 1:2.0.4-5.4.17.3
openoffice.org-langpack-tr_TR< 1:2.0.4-5.4.17.3
openoffice.org-langpack-ts_ZA< 1:2.0.4-5.4.17.3
openoffice.org-langpack-ur< 1:2.0.4-5.4.17.3
openoffice.org-langpack-ve_ZA< 1:2.0.4-5.4.17.3
openoffice.org-langpack-xh_ZA< 1:2.0.4-5.4.17.3
openoffice.org-langpack-zh_CN< 1:2.0.4-5.4.17.3
openoffice.org-langpack-zh_TW< 1:2.0.4-5.4.17.3
openoffice.org-langpack-zu_ZA< 1:2.0.4-5.4.17.3
openoffice.org-libs< 0:1.1.2-40.2.0.EL3 | < 0:1.1.5-10.6.0.2.EL4
openoffice.org-math< 1:2.0.4-5.4.17.3
openoffice.org-pyuno< 1:2.0.4-5.4.17.3
openoffice.org-testtools< 1:2.0.4-5.4.17.3
openoffice.org-writer< 1:2.0.4-5.4.17.3
openoffice.org-xsltfilter< 1:2.0.4-5.4.17.3
openoffice.org2< 1:2.0.4-5.7.0.2.0
openoffice.org2-base< 1:2.0.4-5.7.0.2.0
openoffice.org2-calc< 1:2.0.4-5.7.0.2.0
openoffice.org2-core< 1:2.0.4-5.7.0.2.0
openoffice.org2-debuginfo< 1:2.0.4-5.7.0.2.0
openoffice.org2-draw< 1:2.0.4-5.7.0.2.0
openoffice.org2-emailmerge< 1:2.0.4-5.7.0.2.0
openoffice.org2-graphicfilter< 1:2.0.4-5.7.0.2.0
openoffice.org2-impress< 1:2.0.4-5.7.0.2.0
openoffice.org2-javafilter< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-af_ZA< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-ar< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-bg_BG< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-bn< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-ca_ES< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-cs_CZ< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-cy_GB< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-da_DK< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-de< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-el_GR< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-es< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-et_EE< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-eu_ES< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-fi_FI< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-fr< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-ga_IE< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-gl_ES< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-gu_IN< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-he_IL< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-hi_IN< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-hr_HR< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-hu_HU< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-it< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-ja_JP< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-ko_KR< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-lt_LT< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-ms_MY< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-nb_NO< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-nl< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-nn_NO< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-pa_IN< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-pl_PL< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-pt_BR< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-pt_PT< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-ru< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-sk_SK< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-sl_SI< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-sr_CS< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-sv< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-ta_IN< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-th_TH< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-tr_TR< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-zh_CN< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-zh_TW< 1:2.0.4-5.7.0.2.0
openoffice.org2-langpack-zu_ZA< 1:2.0.4-5.7.0.2.0
openoffice.org2-math< 1:2.0.4-5.7.0.2.0
openoffice.org2-pyuno< 1:2.0.4-5.7.0.2.0
openoffice.org2-testtools< 1:2.0.4-5.7.0.2.0
openoffice.org2-writer< 1:2.0.4-5.7.0.2.0
openoffice.org2-xsltfilter< 1:2.0.4-5.7.0.2.0

Show all 138

Debian2 products

openoffice.org< 2.0.4.dfsg.2-7etch2 | < 1.1.3-9sarge8
debian_linuxEOL3.1 | 4.0

Apache1 product

openoffice< 2.3.0

Canonical1 product

ubuntu_linuxEOL6.06 | 6.10 | 7.04

Sun1 product

staroffice6.0 | 7.0 | 8.0

5 vendors · 143 products

References

40 links

sunsolve.sun.com/search/document.do?assetkey=1-66-200190-1Vendor AdvisoryX Refsource SUNALERTBroken LinkThird Party Advisory
bugs.gentoo.org/show_bug.cgi?id=192818X Refsource CONFIRMIssue TrackingThird Party Advisory
secunia.com/advisories/26816Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26839Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-524-1Vendor AdvisoryX Refsource UBUNTUBroken LinkThird Party Advisory
issues.rpath.com/browse/RPL-1740X Refsource CONFIRMBroken LinkIssue TrackingThird Party Advisory
secunia.com/advisories/26855Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1018702VDB EntryX Refsource SECTRACKThird Party Advisory
sunsolve.sun.com/search/document.do?assetkey=1-26-102994-1Vendor AdvisoryX Refsource SUNALERTBroken LinkThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2007-09/msg00002.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory

Show all 40 references

secunia.com/advisories/26903Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200710-24.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
labs.idefense.com/intelligence/vulnerabilities/display.php?id=593Third Party AdvisoryX Refsource IDEFENSEBroken Link
secunia.com/advisories/27370Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2007:186Vendor AdvisoryX Refsource MANDRIVAThird Party AdvisoryURL Repurposed
www.vupen.com/english/advisories/2007/3262VDB EntryX Refsource VUPENThird Party Advisory
www.openoffice.org/security/cves/CVE-2007-2834.htmlX Refsource CONFIRMPatchVendor Advisory
fedoranews.org/updates/FEDORA-2007-700.shtmlVendor AdvisoryX Refsource FEDORABroken LinkThird Party Advisory
www.redhat.com/support/errata/RHSA-2007-0848.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/26844Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26891Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/479965/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
secunia.com/advisories/27087Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/25690VDB EntryX Refsource BIDPatchThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9967VDB EntrySignatureX Refsource OVALThird Party Advisory
www.vupen.com/english/advisories/2007/3184VDB EntryX Refsource VUPENThird Party Advisory
secunia.com/advisories/26861Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26817Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2007/dsa-1375Vendor AdvisoryX Refsource DEBIANPatchThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/36656VDB EntryX Refsource XFThird Party Advisory
secunia.com/advisories/26912Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27077Third Party AdvisoryX Refsource SECUNIA
fedoranews.org/updates/FEDORA-2007-237.shtmlVendor AdvisoryX Refsource FEDORABroken LinkThird Party Advisory
access.redhat.com/errata/RHSA-2007:0848Advisory
bugzilla.redhat.com/show_bug.cgi?id=251967REPORT
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0848.jsonAdvisory
access.redhat.com/security/cve/CVE-2007-2834REPORT
www.cve.org/CVERecord?id=CVE-2007-2834Advisory
nvd.nist.gov/vuln/detail/CVE-2007-2834Advisory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities