Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Sep 18, 2007 |
| Freebsd | — | Upgrade openoffice | Dec 10, 2025 | Sep 20, 2007 |
| Gentoo Linux | — | Upgrade app-office/openoffice.Upgrade app-office/openoffice-bin. | Oct 30, 2017 | Sep 18, 2007 |
| Suse | — | Upgrade OpenOffice_org-arUpgrade OpenOffice_org-monoUpgrade OpenOffice_org-mkUpgrade OpenOffice_org-hrUpgrade OpenOffice_org-fiUpgrade OpenOffice_org-pt-BRUpgrade OpenOffice_org-etUpgrade OpenOffice_org-svUpgrade OpenOffice_org-gnomeUpgrade OpenOffice_org-xhUpgrade OpenOffice_org-hi-INUpgrade OpenOffice_org-csUpgrade OpenOffice_org-zuUpgrade OpenOffice_org-slUpgrade OpenOffice_org-trUpgrade OpenOffice_org-galleriesUpgrade OpenOffice_org-huUpgrade OpenOffice_org-zh-CNUpgrade OpenOffice_org-ltUpgrade OpenOffice_org-afUpgrade OpenOffice_org-sr-CSUpgrade OpenOffice_org-jaUpgrade OpenOffice_org-plUpgrade OpenOffice_org-esUpgrade OpenOffice_org-deUpgrade OpenOffice_org-pa-INUpgrade OpenOffice_org-gu-INUpgrade OpenOffice_org-ptUpgrade OpenOffice_org-ruUpgrade OpenOffice_org-zh-TWUpgrade OpenOffice_org-nlUpgrade OpenOffice_org-frUpgrade OpenOffice_org-be-BYUpgrade OpenOffice_org-tsUpgrade OpenOffice_org-kdeUpgrade OpenOffice_org-sdk-docUpgrade OpenOffice_orgUpgrade OpenOffice_org-stUpgrade OpenOffice_org-en-GBUpgrade OpenOffice_org-elUpgrade OpenOffice_org-rwUpgrade OpenOffice_org-nbUpgrade OpenOffice_org-nnUpgrade OpenOffice_org-viUpgrade OpenOffice_org-officebeanUpgrade OpenOffice_org-sdkUpgrade OpenOffice_org-caUpgrade suse-releaseUpgrade OpenOffice_org-itUpgrade OpenOffice_org-koUpgrade OpenOffice_org-daUpgrade OpenOffice_org-skUpgrade OpenOffice_org-cyUpgrade OpenOffice_org-kmUpgrade OpenOffice_org-bg | Feb 17, 2015 | Sep 18, 2007 |
| Ubuntu | — | Upgrade openoffice.org2-baseUpgrade openoffice.org-core | Nov 8, 2024 | Sep 18, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub