PT-2008-1159 · Oracle+2 · Openoffice.Org+2

Publicado

2008-04-17

·

Atualizado

2017-09-29

·

CVE-2007-5745

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions OpenOffice.org versions prior to 2.4
Description The issue is related to multiple heap-based buffer overflows that can be triggered by a Quattro Pro (QPRO) file with crafted records, specifically Attribute and Font Description records. This can cause a denial of service (crash) and potentially allow the execution of arbitrary code. The vulnerability can also be exploited to access confidential data, compromise its integrity, and cause a denial of service.
Recommendations For OpenOffice.org versions prior to 2.4, update to version 2.4 or later to resolve the issue. As a temporary workaround, consider avoiding the use of Quattro Pro (QPRO) files with crafted Attribute and Font Description records until a patch is available. Restrict access to potentially malicious files to minimize the risk of exploitation.

Exploit

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2020-02846
CVE-2007-5745
DSA-1547-1
RHSA-2008:0175
RHSA-2008_0175

Produtos afetados

Openoffice.Org
Quattro Pro
Red Hat