CVE-2007-5747

MEDIUM 6.8CVE-2007-5747 · Published 17/04/2008 · updated 16/06/2026

In short

CVE-2007-5747 is a MEDIUM (CVSS 6.8) vulnerability affecting openoffice.org (sun).
Chance of exploitation in the next 30 days (EPSS): 4.1%, higher than 90.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
openoffice.org sun	`= 1.1.0= 2.0.0= 2.1.0= 2.2.0≤ 2.3.0`	No fix yet

Description

Integer underflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted values that trigger an excessive loop and a stack-based buffer overflow.

References

labs.idefense.com/intelligence/vulnerabilities/display.php
secunia.com/advisories/29852 · Vendor Advisory
secunia.com/advisories/29864 · Vendor Advisory
secunia.com/advisories/29871 · Vendor Advisory
secunia.com/advisories/29910 · Vendor Advisory
secunia.com/advisories/29913 · Vendor Advisory
secunia.com/advisories/29987 · Vendor Advisory
secunia.com/advisories/30100 · Vendor Advisory
secunia.com/advisories/30179 · Vendor Advisory
security.gentoo.org/glsa/glsa-200805-16.xml
sunsolve.sun.com/search/document.do
debian.org/security/2008/dsa-1547 · Patch
mandriva.com/security/advisories

More vulnerabilities in openoffice.org

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free