CVE-2007-4575

2007-12-0600:00:00

ubuntu.com

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.026 Low

EPSS

Percentile

90.2%

JSON

HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1,
allows user-assisted remote attackers to execute arbitrary Java code via
crafted database documents, related to “exposing static java methods.”

Bugs

<https://bugs.launchpad.net/ubuntu/+source/openoffice.org/+bug/174112>

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchhsqldb< 1.8.0.2-1ubuntu1.1UNKNOWN
ubuntu7.04noarchhsqldb< 1.8.0.7-1ubuntu2.1UNKNOWN
ubuntu7.10noarchhsqldb< 1.8.0.8-1ubuntu1.1UNKNOWN
ubuntu6.06noarchopenoffice.org< 2.0.2-2ubuntu12.6UNKNOWN
ubuntu7.04noarchopenoffice.org< 2.2.0-1ubuntu6UNKNOWN
ubuntu7.10noarchopenoffice.org< 1:2.3.0-1ubuntu5.4UNKNOWN
ubuntu6.06noarchopenoffice.org-amd64< 2.0.2-2ubuntu12.6-1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	hsqldb	< 1.8.0.2-1ubuntu1.1	UNKNOWN
ubuntu	7.04	noarch	hsqldb	< 1.8.0.7-1ubuntu2.1	UNKNOWN
ubuntu	7.10	noarch	hsqldb	< 1.8.0.8-1ubuntu1.1	UNKNOWN
ubuntu	6.06	noarch	openoffice.org	< 2.0.2-2ubuntu12.6	UNKNOWN
ubuntu	7.04	noarch	openoffice.org	< 2.2.0-1ubuntu6	UNKNOWN
ubuntu	7.10	noarch	openoffice.org	< 1:2.3.0-1ubuntu5.4	UNKNOWN
ubuntu	6.06	noarch	openoffice.org-amd64	< 2.0.2-2ubuntu12.6-1	UNKNOWN