Lucene search

K
cve[email protected]CVE-2007-5745
HistoryApr 17, 2008 - 7:05 p.m.

CVE-2007-5745

2008-04-1719:05:00
CWE-119
web.nvd.nist.gov
30
cve-2007-5745
openoffice.org
buffer overflow
denial of service
arbitrary code execution
nvd

7.4 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.071 Low

EPSS

Percentile

93.9%

Multiple heap-based buffer overflows in OpenOffice.org before 2.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted (1) Attribute and (2) Font Description records.

CPENameOperatorVersion
openoffice:openofficeopenofficele2.3.1

References

7.4 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.071 Low

EPSS

Percentile

93.9%