PT-2007-1151 · Openoffice.Org+2 · Openoffice.Org+2

Publicado

2007-12-05

·

Atualizado

2017-09-29

·

CVE-2007-4575

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: HSQLDB versions prior to 1.8.0.9 OpenOffice.org (OOo) versions prior to 2.3.1
Description: The issue is related to the exposure of static Java methods, allowing user-assisted remote attackers to execute arbitrary Java code via crafted database documents. This could potentially lead to unauthorized access to confidential data, disruption of data integrity, and denial of service.
Recommendations: For HSQLDB versions prior to 1.8.0.9, update to version 1.8.0.9 or later to resolve the issue. For OpenOffice.org (OOo) versions prior to 2.3.1, update to version 2.3.1 or later to resolve the issue.

Correção

Code Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

BDU:2020-02847
CVE-2007-4575
DSA-1419-1
RHSA-2007:1048
RHSA-2007:1090
RHSA-2007_1048
RHSA-2007_1090
RHSA-2008:0151
RHSA-2008:0158
RHSA-2008:0213

Produtos afetados

Hsqldb
Openoffice.Org
Red Hat