// For flags

CVE-2007-5745

openoffice.org: Quattro Pro files handling heap overflows in Attribute and Font records

Severity Score

8.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Multiple heap-based buffer overflows in OpenOffice.org before 2.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted (1) Attribute and (2) Font Description records.

Múltiples desbordamientos de búfer en la región heap de la memoria en OpenOffice.org versiones anteriores a 2.4, permiten a los atacantes remotos causar una denegación de servicio (bloqueo) y posiblemente ejecutar código arbitrario por medio de un archivo Quattro Pro (QPRO) con (1) Atributo y (2) registros de Descripción de Fuente diseñados.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2007-10-31 CVE Reserved
  • 2008-04-17 CVE Published
  • 2024-08-07 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (28)
URL Tag Source
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=691 Third Party Advisory
http://www.openoffice.org/security/cves/CVE-2007-4770.html X_refsource_confirm
http://www.securityfocus.com/bid/28819 Vdb Entry
http://www.securitytracker.com/id?1019891 Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/41863 Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11006 Signature
URL Date SRC
URL Date SRC
http://secunia.com/advisories/29864 2017-09-29
http://www.debian.org/security/2008/dsa-1547 2017-09-29
http://www.openoffice.org/security/bulletin.html 2017-09-29
http://www.openoffice.org/security/cves/CVE-2007-5745.html 2017-09-29
URL Date SRC
http://secunia.com/advisories/29852 2017-09-29
http://secunia.com/advisories/29871 2017-09-29
http://secunia.com/advisories/29910 2017-09-29
http://secunia.com/advisories/29913 2017-09-29
http://secunia.com/advisories/29987 2017-09-29
http://secunia.com/advisories/30100 2017-09-29
http://secunia.com/advisories/30179 2017-09-29
http://security.gentoo.org/glsa/glsa-200805-16.xml 2017-09-29
http://sunsolve.sun.com/search/document.do?assetkey=1-26-231601-1 2017-09-29
http://www.mandriva.com/security/advisories?name=MDVSA-2008:095 2017-09-29
http://www.novell.com/linux/security/advisories/2008_23_openoffice.html 2017-09-29
http://www.redhat.com/support/errata/RHSA-2008-0175.html 2017-09-29
http://www.ubuntu.com/usn/usn-609-1 2017-09-29
http://www.vupen.com/english/advisories/2008/1253/references 2017-09-29
http://www.vupen.com/english/advisories/2008/1375/references 2017-09-29
https://bugzilla.redhat.com/show_bug.cgi?id=435678 2008-04-17
https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00448.html 2017-09-29
https://access.redhat.com/security/cve/CVE-2007-5745 2008-04-17
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Openoffice
Search vendor "Openoffice"
 Openoffice
Search vendor "Openoffice" for product "Openoffice"
 <= 2.3.1
Search vendor "Openoffice" for product "Openoffice" and version " <= 2.3.1"
-
Affected