openoffice -- arbitrary command execution vulnerability

iDefense reports: Remote exploitation of multiple integer overflow vulnerabilities within OpenOffice, as included in various vendors' operating system distributions, allows attackers to execute arbitrary code. These vulnerabilities exist within the TIFF parsing code of the OpenOffice suite. When...

iDefense Security Advisory 09.17.07: Multiple Vendor OpenOffice TIFF File Parsing Multiple Integer Overflow Vulnerabilities

Multiple Vendor OpenOffice TIFF File Parsing Multiple Integer Overflow Vulnerabilities iDefense Security Advisory 09.17.07 http://labs.idefense.com/intelligence/vulnerabilities/ Sep 17, 2007 I. BACKGROUND OpenOffice is an open-source desktop office suite for many of today's popular operating...

CVE-2007-2834

Integer overflow in the TIFF parser in OpenOffice.org OOo before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite StarSuite; allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of...

CVE-2007-2834

Integer overflow in the TIFF parser in OpenOffice.org OOo before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite StarSuite; allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of...

Integer overflow

Integer overflow in the TIFF parser in OpenOffice.org OOo before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite StarSuite; allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of...

CVE-2007-2834

Integer overflow in the TIFF parser in OpenOffice.org OOo before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite StarSuite; allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of...

EUVD-2007-2826

Integer overflow in the TIFF parser in OpenOffice.org OOo before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite StarSuite; allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of...

CVE-2007-2834

The CVE describes a heap-based buffer overflow in the TIFF parser of OpenOffice.org (and StarOffice/StarSuite) caused by an integer overflow when processing TIFF files, enabling remote arbitrary code execution. The issue affects OpenOffice.org-based suites prior to version 2.3 and StarOffice/Star...

openoffice.org, openoffice.org2 security update

CentOS Errata and Security Advisory CESA-2007:0848 Updated openoffice.org packages to correct a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an...

Important: Red Hat Security Advisory: openoffice.org security update

Updated openoffice.org packages to correct a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop...

openoffice.org TIFF parsing heap overflow

Integer overflow in the TIFF parser in OpenOffice.org OOo before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite StarSuite; allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of...

OpenOffice TIFF文件解析缓冲区溢出漏洞

OpenOffice是一款开放源代码的文字处理应用程序。 OpenOffice处理TIFF文件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 构建恶意的TIFF文件，诱使用户打开可触发漏洞，目前没有详细漏洞细节提供。 OpenOffice OpenOffice 2.3 OpenOffice OpenOffice 2.2.1 OpenOffice OpenOffice 2.0.4 OpenOffice OpenOffice 1.1.3 + Gentoo Linux + RedHat Fedora Core3 + Ubuntu Ubuntu Linux 5.0 4...

CVE-2007-2834: Integer Overflow or Wraparound

Integer overflow in the TIFF parser in OpenOffice.org OOo before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite StarSuite; allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of...

OpenOffice < 2.3 TIFF Parser Multiple Overflows

Binary data 4216.prm...

Important: openoffice.org security update

1.1.5-10.0.2 - Resolves: rhbz251972 CVE-2007-2834 TIFF parsing heap overflow...

Sun OpenOffice.org < 2.3 TIFF Parser Buffer Overflow Vulnerabilities

The remote host is running a version of Sun Microsystems OpenOffice.org that is affected by multiple integer overflows in its TIFF document parser that can be triggered when parsing tags in TIFF directory entries. If a remote attacker can trick a user into opening a specially crafted TIFF documen...

[SECURITY] [DSA 1375-1] New OpenOffice.org packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1375-1 [email protected] http://www.debian.org/security/ Martin Schulze September 17th, 2007 http://www.debian.org/security/faq -...

DSA-1375-1 openoffice.org - buffer overflow

Bulletin has no description...

CVE-2007-2192

Buffer overflow in Photofiltre Studio 8.1.1 allows user-assisted remote attackers to execute arbitrary code via a crafted .tif file...

Mambo Component zOOm Media Gallery <= 2.5 Beta 2 RFI Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== Mambo Component zOOm Media Gallery array , "getMakernoteTextValue" = array , "InterpretMakernotetoHTML" = array ; // Include the Main TIFF and EXIF Tags array...