CVE-2007-2834: Integer Overflow
Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2834?
CVE-2007-2834 has a high severity rating due to the potential for arbitrary code execution by remote attackers.
How do I fix CVE-2007-2834?
To fix CVE-2007-2834, update OpenOffice.org to version 2.3 or later, or apply any available patches for affected versions.
Which software is affected by CVE-2007-2834?
CVE-2007-2834 affects OpenOffice.org versions before 2.3, Sun StarOffice versions 6, 7, and 8, as well as certain Debian and Ubuntu Linux distributions.
How does CVE-2007-2834 exploit the TIFF parser?
CVE-2007-2834 exploits an integer overflow in the TIFF parser which can lead to improper memory allocation.
Can CVE-2007-2834 be exploited remotely?
Yes, CVE-2007-2834 can be exploited remotely through specially crafted TIFF files.