Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.14705.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
n/a n/a affected
Version Status Constraints
n/a affected —

Configuration 1 [-]

OR cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*
cpe:2.3:a:sun:staroffice:6.0:*:*:*:*:*:*:*
cpe:2.3:a:sun:staroffice:7.0:*:*:*:*:*:*:*
cpe:2.3:a:sun:staroffice:8.0:*:*:*:*:*:*:*
cpe:2.3:a:sun:starsuite:*:*:*:*:*:*:*:*

Configuration 2 [-]

OR cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

Configuration 3 [-]

OR cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 3
openoffice.org-0:1.1.2-40.2.0.EL3 cpe:/o:redhat:enterprise_linux:3 RHSA-2007:0848 2007-09-18T00:00:00Z
Red Hat Enterprise Linux 4
openoffice.org-0:1.1.5-10.6.0.2.EL4 cpe:/o:redhat:enterprise_linux:4 RHSA-2007:0848 2007-09-18T00:00:00Z
openoffice.org2-1:2.0.4-5.7.0.2.0 cpe:/o:redhat:enterprise_linux:4 RHSA-2007:0848 2007-09-18T00:00:00Z
Red Hat Enterprise Linux 5
openoffice.org-1:2.0.4-5.4.17.3 cpe:/o:redhat:enterprise_linux:5 RHSA-2007:0848 2007-09-18T00:00:00Z

No data.

Project Subscriptions

Vendors Products
Apache Subscribe
Openoffice Subscribe
Canonical Subscribe
Ubuntu Linux Subscribe
Debian Subscribe
Debian Linux Subscribe
Redhat Subscribe
Enterprise Linux Subscribe
Sun Subscribe
Staroffice Subscribe
Starsuite Subscribe
Advisories
Source ID Title
Debian DSA Debian DSA DSA-1375-1 New OpenOffice.org packages fix arbitrary code execution
Ubuntu USN Ubuntu USN USN-524-1 OpenOffice.org vulnerability
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://bugs.gentoo.org/show_bug.cgi?id=192818 cve-icon cve-icon
http://fedoranews.org/updates/FEDORA-2007-237.shtml cve-icon cve-icon
http://fedoranews.org/updates/FEDORA-2007-700.shtml cve-icon cve-icon
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=593 cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2007-09/msg00002.html cve-icon cve-icon
http://secunia.com/advisories/26816 cve-icon cve-icon
http://secunia.com/advisories/26817 cve-icon cve-icon
http://secunia.com/advisories/26839 cve-icon cve-icon
http://secunia.com/advisories/26844 cve-icon cve-icon
http://secunia.com/advisories/26855 cve-icon cve-icon
http://secunia.com/advisories/26861 cve-icon cve-icon
http://secunia.com/advisories/26891 cve-icon cve-icon
http://secunia.com/advisories/26903 cve-icon cve-icon
http://secunia.com/advisories/26912 cve-icon cve-icon
http://secunia.com/advisories/27077 cve-icon cve-icon
http://secunia.com/advisories/27087 cve-icon cve-icon
http://secunia.com/advisories/27370 cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200710-24.xml cve-icon cve-icon
http://securitytracker.com/id?1018702 cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102994-1 cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200190-1 cve-icon cve-icon
http://www.debian.org/security/2007/dsa-1375 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDKSA-2007:186 cve-icon cve-icon
http://www.openoffice.org/security/cves/CVE-2007-2834.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2007-0848.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/479965/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/bid/25690 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-524-1 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/3184 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/3262 cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/36656 cve-icon cve-icon
https://issues.rpath.com/browse/RPL-1740 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2007-2834 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9967 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2007-2834 cve-icon
History

Wed, 16 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.10713}

 epss

{'score': 0.08765}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-07T13:49:57.778Z

Reserved: 2007-05-24T00:00:00

Link: CVE-2007-2834

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2007-09-18T21:17:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-2834

cve-icon Redhat

Severity : Important

Publid Date: 2007-09-17T00:00:00Z

Links: CVE-2007-2834 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses