PT-2008-1159 · Oracle+2 · Openoffice.Org+2

Published 2008-04-17 · Updated 2017-09-29 · CVE-2007-5745

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenOffice.org versions prior to 2.4

Description The issue is related to multiple heap-based buffer overflows that can be triggered by a Quattro Pro (QPRO) file with crafted records, specifically Attribute and Font Description records. This can cause a denial of service (crash) and potentially allow the execution of arbitrary code. The vulnerability can also be exploited to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For OpenOffice.org versions prior to 2.4, update to version 2.4 or later to resolve the issue. As a temporary workaround, consider avoiding the use of Quattro Pro (QPRO) files with crafted Attribute and Font Description records until a patch is available. Restrict access to potentially malicious files to minimize the risk of exploitation.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2020-02846

CVE-2007-5745

DSA-1547-1

RHSA-2008:0175

RHSA-2008_0175

Affected Products

Openoffice.Org

Quattro Pro

Red Hat

References · 40

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/openoffice_ole.rb · Exploit
• http://secunia.com/advisories/29871 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-April/msg00448.html · Vendor Advisory
• http://secunia.com/advisories/29864 · Vendor Advisory
• http://novell.com/linux/security/advisories/2008_23_openoffice.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02844 · Security Note
• http://openoffice.org/security/bulletin.html · Patch
• http://vupen.com/english/advisories/2008/1253/references · Vendor Advisory
• http://secunia.com/advisories/30179 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02846 · Security Note
• http://secunia.com/advisories/29987 · Vendor Advisory
• http://vupen.com/english/advisories/2008/1375/references · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-231601-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5745 · Security Note
• http://secunia.com/advisories/29913 · Vendor Advisory