SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (Generic)  >   StarOffice Vendors:   Sun
(Sun Issues Fix for StarOffice) OpenOffice Buffer Overflow in Processing TIFF Images Lets Remote Users Execute Arbitrary Code
SecurityTracker Alert ID:  1018746
SecurityTracker URL:  http://securitytracker.com/id/1018746
CVE Reference:   CVE-2007-2834   (Links to External Site)
Updated:  Oct 17 2007
Original Entry Date:  Sep 27 2007
Impact:   Execution of arbitrary code via network, User access via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): 6, 7, 8
Description:   A vulnerability was reported in the OpenOffice.org Office Suite. A remote user can cause arbitrary code to be executed on the target user's system. StarOffice is affected.

A remote user can create a specially crafted TIFF image file that, when loaded by the target user, will trigger an integer overflow and execute arbitrary code on the target system. The code will run with the privileges of the target user.\

iDefense disclosed this vulnerability.

Impact:   A remote user can create a TIFF image file that, when loaded by the target user, will execute arbitrary code on the target user's system.
Solution:   Sun has issued the following fixes for StarOffice, which is affected by this vulnerability.

SPARC Platform

* StarOffice/StarSuite 6.0 with patch 112885-09 or later
* StarOffice/StarSuite 7 with patch 116519-15 or later
* StarOffice 8 with patch 120185-12 or later
* StarSuite 8 with patch 120189-12 or later

x86 Platform

* StarOffice/StarSuite 6.0 with patch 112886-09 or later
* StarOffice/StarSuite 7 with patch 117073-13 or later
* StarOffice 8 with patch 120186-12 or later
* StarSuite 8 with patch 120190-12 or later

Linux Platform

* StarOffice/StarSuite 6.0 with patch 112887-09 or later
* StarOffice/StarSuite 7 with patch 116518-15 or later
* StarSuite 8 with patch 120188-11 or later
* StarOffice 8 with patch 120184-11 or later

Windows Platform

* StarOffice/StarSuite 6.0 with patch 112888-09 or later
* StarOffice/StarSuite 7 with patch 116520-14 or later
* StarOffice 8 with patch 120187-11 or later
* StarSuite 8 with patch 120191-11 or later
* StarSuite 8 Impress Standalone with patch 128021-01 or later

The Sun advisory is available at:

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102994-1

Cause:   Boundary error
Underlying OS:  Linux (Any), UNIX (Solaris - SunOS), Windows (Any)

Message History:   This archive entry is a follow-up to the message listed below.
Sep 17 2007 OpenOffice Buffer Overflow in Processing TIFF Images Lets Remote Users Execute Arbitrary Code



 Source Message Contents



[Original Message Not Available for Viewing]


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2022, SecurityGlobal.net LLC