(Sun Issues Fix for StarOffice) OpenOffice Buffer Overflow in Processing TIFF Images Lets Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1018746 |
|
SecurityTracker URL: http://securitytracker.com/id/1018746
|
|
CVE Reference:
CVE-2007-2834
(Links to External Site)
|
Updated: Oct 17 2007
|
Original Entry Date: Sep 27 2007
|
Impact:
Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 6, 7, 8
|
Description:
A vulnerability was reported in the OpenOffice.org Office Suite. A remote user can cause arbitrary code to be executed on the target user's system. StarOffice is affected.
A remote user can create a specially crafted TIFF image file that, when loaded by the target user, will trigger an integer overflow and execute arbitrary code on the target system. The code will run with the privileges of the target user.\
iDefense disclosed this vulnerability.
|
Impact:
A remote user can create a TIFF image file that, when loaded by the target user, will execute arbitrary code on the target user's system.
|
Solution:
Sun has issued the following fixes for StarOffice, which is affected by this vulnerability.
SPARC Platform
* StarOffice/StarSuite 6.0 with patch 112885-09 or later
* StarOffice/StarSuite 7 with patch 116519-15 or later
* StarOffice 8 with patch 120185-12 or later
* StarSuite 8 with patch 120189-12 or later
x86 Platform
* StarOffice/StarSuite 6.0 with patch 112886-09 or later
* StarOffice/StarSuite 7 with patch 117073-13 or later
* StarOffice 8 with patch 120186-12 or later
* StarSuite 8 with patch 120190-12 or later
Linux Platform
* StarOffice/StarSuite 6.0 with patch 112887-09 or later
* StarOffice/StarSuite 7 with patch 116518-15 or later
* StarSuite 8 with patch 120188-11 or later
* StarOffice 8 with patch 120184-11 or later
Windows Platform
* StarOffice/StarSuite 6.0 with patch 112888-09 or later
* StarOffice/StarSuite 7 with patch 116520-14 or later
* StarOffice 8 with patch 120187-11 or later
* StarSuite 8 with patch 120191-11 or later
* StarSuite 8 Impress Standalone with patch 128021-01 or later
The Sun advisory is available at:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102994-1
|
Cause:
Boundary error
|
Underlying OS:
Linux (Any), UNIX (Solaris - SunOS), Windows (Any)
|
|
Message History:
This archive entry is a follow-up to the message listed below.
|
Source Message Contents
|
Date: Thu, 27 Sep 2007 08:26:04 -0400
Subject: Manipulated TIFF Files or Documents Containing Manipulated TIFF Files May Lead to Heap Overflows and Arbitrary Code Execution
|
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102994-1
CVE-2007-2834
|
|
