Vulnerability-Lookup

CVE-2007-0239 (GCVE-0-2007-0239)

Vulnerability from cvelistv5 – Published: 2007-03-21 19:00 – Updated: 2024-08-07 12:12

Summary

OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2319 records in the last 180 days details

References

25 references

URL	Tags
http://www.gentoo.org/security/en/glsa/glsa-20070…	vendor-advisoryx_refsource_GENTOO
http://secunia.com/advisories/24588	third-party-advisoryx_refsource_SECUNIA
https://issues.foresightlinux.org/browse/FL-211	x_refsource_CONFIRM
http://www.securityfocus.com/bid/22812	vdb-entryx_refsource_BID
http://secunia.com/advisories/24810	third-party-advisoryx_refsource_SECUNIA
http://lists.suse.com/archive/suse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.redhat.com/support/errata/RHSA-2007-00…	vendor-advisoryx_refsource_REDHAT
http://www.vupen.com/english/advisories/2007/1032	vdb-entryx_refsource_VUPEN
http://www.ubuntu.com/usn/usn-444-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/24613	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/24676	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/24550	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/24465	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2007/dsa-1270	vendor-advisoryx_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://secunia.com/advisories/24646	third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id?1017799	vdb-entryx_refsource_SECTRACK
http://www.redhat.com/support/errata/RHSA-2007-00…	vendor-advisoryx_refsource_REDHAT
http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
http://secunia.com/advisories/24647	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/1117	vdb-entryx_refsource_VUPEN
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/24906	third-party-advisoryx_refsource_SECUNIA
https://issues.rpath.com/browse/RPL-1118	x_refsource_CONFIRM

Date Public

2007-03-20 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:12:17.693Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-200704-12",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml"
          },
          {
            "name": "24588",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24588"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.foresightlinux.org/browse/FL-211"
          },
          {
            "name": "22812",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/22812"
          },
          {
            "name": "24810",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24810"
          },
          {
            "name": "SUSE-SA:2007:023",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html"
          },
          {
            "name": "RHSA-2007:0033",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0033.html"
          },
          {
            "name": "ADV-2007-1032",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/1032"
          },
          {
            "name": "USN-444-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-444-1"
          },
          {
            "name": "24613",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24613"
          },
          {
            "name": "24676",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24676"
          },
          {
            "name": "24550",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24550"
          },
          {
            "name": "24465",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24465"
          },
          {
            "name": "DSA-1270",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1270"
          },
          {
            "name": "MDKSA-2007:073",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:073"
          },
          {
            "name": "openoffice-shell-command-execution(33113)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33113"
          },
          {
            "name": "24646",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24646"
          },
          {
            "name": "1017799",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1017799"
          },
          {
            "name": "RHSA-2007:0069",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0069.html"
          },
          {
            "name": "102807",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102807-1"
          },
          {
            "name": "24647",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24647"
          },
          {
            "name": "ADV-2007-1117",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/1117"
          },
          {
            "name": "oval:org.mitre.oval:def:11422",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11422"
          },
          {
            "name": "24906",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24906"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1118"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-03-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "GLSA-200704-12",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml"
        },
        {
          "name": "24588",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24588"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.foresightlinux.org/browse/FL-211"
        },
        {
          "name": "22812",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/22812"
        },
        {
          "name": "24810",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24810"
        },
        {
          "name": "SUSE-SA:2007:023",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html"
        },
        {
          "name": "RHSA-2007:0033",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0033.html"
        },
        {
          "name": "ADV-2007-1032",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/1032"
        },
        {
          "name": "USN-444-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-444-1"
        },
        {
          "name": "24613",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24613"
        },
        {
          "name": "24676",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24676"
        },
        {
          "name": "24550",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24550"
        },
        {
          "name": "24465",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24465"
        },
        {
          "name": "DSA-1270",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1270"
        },
        {
          "name": "MDKSA-2007:073",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:073"
        },
        {
          "name": "openoffice-shell-command-execution(33113)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33113"
        },
        {
          "name": "24646",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24646"
        },
        {
          "name": "1017799",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1017799"
        },
        {
          "name": "RHSA-2007:0069",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0069.html"
        },
        {
          "name": "102807",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102807-1"
        },
        {
          "name": "24647",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24647"
        },
        {
          "name": "ADV-2007-1117",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/1117"
        },
        {
          "name": "oval:org.mitre.oval:def:11422",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11422"
        },
        {
          "name": "24906",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24906"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1118"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-0239",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-200704-12",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml"
            },
            {
              "name": "24588",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24588"
            },
            {
              "name": "https://issues.foresightlinux.org/browse/FL-211",
              "refsource": "CONFIRM",
              "url": "https://issues.foresightlinux.org/browse/FL-211"
            },
            {
              "name": "22812",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/22812"
            },
            {
              "name": "24810",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24810"
            },
            {
              "name": "SUSE-SA:2007:023",
              "refsource": "SUSE",
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html"
            },
            {
              "name": "RHSA-2007:0033",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0033.html"
            },
            {
              "name": "ADV-2007-1032",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/1032"
            },
            {
              "name": "USN-444-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-444-1"
            },
            {
              "name": "24613",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24613"
            },
            {
              "name": "24676",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24676"
            },
            {
              "name": "24550",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24550"
            },
            {
              "name": "24465",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24465"
            },
            {
              "name": "DSA-1270",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1270"
            },
            {
              "name": "MDKSA-2007:073",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:073"
            },
            {
              "name": "openoffice-shell-command-execution(33113)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33113"
            },
            {
              "name": "24646",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24646"
            },
            {
              "name": "1017799",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1017799"
            },
            {
              "name": "RHSA-2007:0069",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0069.html"
            },
            {
              "name": "102807",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102807-1"
            },
            {
              "name": "24647",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24647"
            },
            {
              "name": "ADV-2007-1117",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/1117"
            },
            {
              "name": "oval:org.mitre.oval:def:11422",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11422"
            },
            {
              "name": "24906",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24906"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1118",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1118"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-0239",
    "datePublished": "2007-03-21T19:00:00.000Z",
    "dateReserved": "2007-01-16T00:00:00.000Z",
    "dateUpdated": "2024-08-07T12:12:17.693Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2007-0239",
      "date": "2026-10-14",
      "epss": "0.03476",
      "percentile": "0.88891"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:openoffice:openoffice:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C404C9AA-E1F8-4431-8706-4BB416D19454",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document."
          },
          {
            "lang": "es",
            "value": "OpenOffice.org (OOo) Office Suite permite a atacantes con la intervenci\u00f3n del usuario ejecutar comandos de su elecci\u00f3n mediante la inserci\u00f3n de metacaracteres de shell en un enlace preparado dentro de un documento manipulado."
          }
        ],
        "id": "CVE-2007-0239",
        "lastModified": "2026-04-23T00:35:47.467",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 9.3,
                "confidentialityImpact": "COMPLETE",
                "integrityImpact": "COMPLETE",
                "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 8.6,
              "impactScore": 10.0,
              "obtainAllPrivilege": true,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": true
            }
          ]
        },
        "published": "2007-03-21T19:19:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/24465"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/24550"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/24588"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/24613"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/24646"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/24647"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/24676"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/24810"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/24906"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102807-1"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1270"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:073"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0033.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0069.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/22812"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securitytracker.com/id?1017799"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.ubuntu.com/usn/usn-444-1"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.vupen.com/english/advisories/2007/1032"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.vupen.com/english/advisories/2007/1117"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33113"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://issues.foresightlinux.org/browse/FL-211"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://issues.rpath.com/browse/RPL-1118"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11422"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/24465"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/24550"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/24588"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/24613"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/24646"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/24647"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/24676"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/24810"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/24906"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102807-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1270"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:073"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0033.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0069.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/22812"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securitytracker.com/id?1017799"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.ubuntu.com/usn/usn-444-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2007/1032"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2007/1117"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33113"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://issues.foresightlinux.org/browse/FL-211"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://issues.rpath.com/browse/RPL-1118"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11422"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-Other"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2025-11-21T13:20:23+00:00",
      "cve": "CVE-2007-0239",
      "id": "CVE-2007-0239",
      "initial_release_date": "2007-03-20T00:00:00+00:00",
      "product_status:fixed": "362",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "security flaw",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2007/cve-2007-0239.json",
      "version": "3"
    }
  }
}

CERTA-2007-AVI-136

Vulnerability from certfr_avis - Published: 2007-03-21 - Updated: 2007-04-02

De multiples vulnérabilités présentes dans OpenOffice.org permettent à un utilisateur distant d'exécuter du code arbitraire.

Description

Trois vulnérabilités sont présentent dans OpenOffice.org :

la première est due au fait que OpenOffice.org embarque dans son code la bibliothèque de fonctions libwpd mettant en œuvre le support des fichiers WordPerfect dans OpenOffice.org. Or, cette bibliothèque de fonction est vulnérable et permet l'exécution de code arbitraire (CERTA-2007-AVI-135) ;
la deuxième vulnérabilité concerne le composant tableur de OpenOffice.org qui comporte une faille de type débordement de mémoire permettant l'exécution de code arbitraire ;
la dernière vulnérabilité est, quant à elle, due à un manque de contrôle des paramètres passés en ligne de commande à OpenOffice.org. Ceci permet à un utilisateur malintentionné d'exécuter du code arbitraire à distance par le biais d'un lien construit de façon particulière.

Solution

La version 2.2 corrige les problèmes.

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
OpenOffice	N/A	OpenOffice.org versions 2.1.0 et antérieures.
OpenOffice	N/A	OpenOffice.org versions 1.0.3.1 et antérieures ;
OpenOffice	N/A	OpenOffice.org versions 1.1.5 et antérieures ;

References

Title

Publication Time

FKIE_CVE-2007-0239

Vulnerability from fkie_nvd - Published: 2007-03-21 19:19 - Updated: 2026-06-16 22:35

Severity

Summary

OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document.

References

URL	Tags
cve@mitre.org	http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html
cve@mitre.org	http://secunia.com/advisories/24465
cve@mitre.org	http://secunia.com/advisories/24550
cve@mitre.org	http://secunia.com/advisories/24588
cve@mitre.org	http://secunia.com/advisories/24613
cve@mitre.org	http://secunia.com/advisories/24646
cve@mitre.org	http://secunia.com/advisories/24647
cve@mitre.org	http://secunia.com/advisories/24676
cve@mitre.org	http://secunia.com/advisories/24810
cve@mitre.org	http://secunia.com/advisories/24906
cve@mitre.org	http://sunsolve.sun.com/search/document.do?assetkey=1-26-102807-1
cve@mitre.org	http://www.debian.org/security/2007/dsa-1270	Vendor Advisory
cve@mitre.org	http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml
cve@mitre.org	http://www.mandriva.com/security/advisories?name=MDKSA-2007:073
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2007-0033.html
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2007-0069.html
cve@mitre.org	http://www.securityfocus.com/bid/22812
cve@mitre.org	http://www.securitytracker.com/id?1017799
cve@mitre.org	http://www.ubuntu.com/usn/usn-444-1
cve@mitre.org	http://www.vupen.com/english/advisories/2007/1032
cve@mitre.org	http://www.vupen.com/english/advisories/2007/1117
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/33113
cve@mitre.org	https://issues.foresightlinux.org/browse/FL-211
cve@mitre.org	https://issues.rpath.com/browse/RPL-1118
cve@mitre.org	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11422
af854a3a-2127-422b-91ae-364da2661108	http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24465
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24550
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24588
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24613
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24646
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24647
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24676
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24810
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24906
af854a3a-2127-422b-91ae-364da2661108	http://sunsolve.sun.com/search/document.do?assetkey=1-26-102807-1
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2007/dsa-1270	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDKSA-2007:073
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2007-0033.html
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2007-0069.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/22812
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id?1017799
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/usn-444-1
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2007/1032
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2007/1117
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/33113
af854a3a-2127-422b-91ae-364da2661108	https://issues.foresightlinux.org/browse/FL-211
af854a3a-2127-422b-91ae-364da2661108	https://issues.rpath.com/browse/RPL-1118
af854a3a-2127-422b-91ae-364da2661108	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11422

Impacted products

	Vendor	Product	Version
	openoffice	openoffice	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:openoffice:openoffice:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C404C9AA-E1F8-4431-8706-4BB416D19454",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document."
    },
    {
      "lang": "es",
      "value": "OpenOffice.org (OOo) Office Suite permite a atacantes con la intervenci\u00f3n del usuario ejecutar comandos de su elecci\u00f3n mediante la inserci\u00f3n de metacaracteres de shell en un enlace preparado dentro de un documento manipulado."
    }
  ],
  "id": "CVE-2007-0239",
  "lastModified": "2026-06-16T22:35:11.130",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.3,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2007-03-21T19:19:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/24465"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/24550"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/24588"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/24613"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/24646"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/24647"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/24676"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/24810"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/24906"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102807-1"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.debian.org/security/2007/dsa-1270"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:073"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0033.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0069.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/22812"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1017799"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/usn-444-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/1032"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/1117"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33113"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://issues.foresightlinux.org/browse/FL-211"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://issues.rpath.com/browse/RPL-1118"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11422"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/24465"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/24550"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/24588"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/24613"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/24646"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/24647"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/24676"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/24810"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/24906"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102807-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.debian.org/security/2007/dsa-1270"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:073"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0033.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0069.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/22812"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1017799"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/usn-444-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/1032"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/1117"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33113"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://issues.foresightlinux.org/browse/FL-211"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://issues.rpath.com/browse/RPL-1118"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11422"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-RM66-MCP2-MM7M

Vulnerability from github – Published: 2022-05-01 17:42 – Updated: 2022-05-01 17:42

Details

OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2007-0239"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2007-03-21T19:19:00Z",
    "severity": "HIGH"
  },
  "details": "OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document.",
  "id": "GHSA-rm66-mcp2-mm7m",
  "modified": "2022-05-01T17:42:37Z",
  "published": "2022-05-01T17:42:37Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0239"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33113"
    },
    {
      "type": "WEB",
      "url": "https://issues.foresightlinux.org/browse/FL-211"
    },
    {
      "type": "WEB",
      "url": "https://issues.rpath.com/browse/RPL-1118"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11422"
    },
    {
      "type": "WEB",
      "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24465"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24550"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24588"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24613"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24646"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24647"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24676"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24810"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24906"
    },
    {
      "type": "WEB",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102807-1"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2007/dsa-1270"
    },
    {
      "type": "WEB",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:073"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0033.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0069.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/22812"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1017799"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/usn-444-1"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/1032"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/1117"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2007-0239

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document.

Aliases

CVE-2007-0239

Aliases

CVE-2007-0239

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2007-0239",
    "description": "OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document.",
    "id": "GSD-2007-0239",
    "references": [
      "https://www.suse.com/security/cve/CVE-2007-0239.html",
      "https://www.debian.org/security/2007/dsa-1270",
      "https://access.redhat.com/errata/RHSA-2007:0069",
      "https://access.redhat.com/errata/RHSA-2007:0033",
      "https://linux.oracle.com/cve/CVE-2007-0239.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2007-0239"
      ],
      "details": "OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document.",
      "id": "GSD-2007-0239",
      "modified": "2023-12-13T01:21:35.841676Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2007-0239",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "GLSA-200704-12",
            "refsource": "GENTOO",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml"
          },
          {
            "name": "24588",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24588"
          },
          {
            "name": "https://issues.foresightlinux.org/browse/FL-211",
            "refsource": "CONFIRM",
            "url": "https://issues.foresightlinux.org/browse/FL-211"
          },
          {
            "name": "22812",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/22812"
          },
          {
            "name": "24810",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24810"
          },
          {
            "name": "SUSE-SA:2007:023",
            "refsource": "SUSE",
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html"
          },
          {
            "name": "RHSA-2007:0033",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0033.html"
          },
          {
            "name": "ADV-2007-1032",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/1032"
          },
          {
            "name": "USN-444-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/usn-444-1"
          },
          {
            "name": "24613",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24613"
          },
          {
            "name": "24676",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24676"
          },
          {
            "name": "24550",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24550"
          },
          {
            "name": "24465",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24465"
          },
          {
            "name": "DSA-1270",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2007/dsa-1270"
          },
          {
            "name": "MDKSA-2007:073",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:073"
          },
          {
            "name": "openoffice-shell-command-execution(33113)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33113"
          },
          {
            "name": "24646",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24646"
          },
          {
            "name": "1017799",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id?1017799"
          },
          {
            "name": "RHSA-2007:0069",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0069.html"
          },
          {
            "name": "102807",
            "refsource": "SUNALERT",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102807-1"
          },
          {
            "name": "24647",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24647"
          },
          {
            "name": "ADV-2007-1117",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/1117"
          },
          {
            "name": "oval:org.mitre.oval:def:11422",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11422"
          },
          {
            "name": "24906",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24906"
          },
          {
            "name": "https://issues.rpath.com/browse/RPL-1118",
            "refsource": "CONFIRM",
            "url": "https://issues.rpath.com/browse/RPL-1118"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:openoffice:openoffice:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-0239"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-1270",
              "refsource": "DEBIAN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.debian.org/security/2007/dsa-1270"
            },
            {
              "name": "1017799",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id?1017799"
            },
            {
              "name": "RHSA-2007:0033",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0033.html"
            },
            {
              "name": "RHSA-2007:0069",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0069.html"
            },
            {
              "name": "102807",
              "refsource": "SUNALERT",
              "tags": [],
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102807-1"
            },
            {
              "name": "SUSE-SA:2007:023",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html"
            },
            {
              "name": "USN-444-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/usn-444-1"
            },
            {
              "name": "22812",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/22812"
            },
            {
              "name": "24465",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/24465"
            },
            {
              "name": "24550",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/24550"
            },
            {
              "name": "24646",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/24646"
            },
            {
              "name": "24647",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/24647"
            },
            {
              "name": "https://issues.foresightlinux.org/browse/FL-211",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://issues.foresightlinux.org/browse/FL-211"
            },
            {
              "name": "MDKSA-2007:073",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:073"
            },
            {
              "name": "24676",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/24676"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1118",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://issues.rpath.com/browse/RPL-1118"
            },
            {
              "name": "24810",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/24810"
            },
            {
              "name": "GLSA-200704-12",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml"
            },
            {
              "name": "24906",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/24906"
            },
            {
              "name": "24588",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/24588"
            },
            {
              "name": "24613",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/24613"
            },
            {
              "name": "ADV-2007-1032",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/1032"
            },
            {
              "name": "ADV-2007-1117",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/1117"
            },
            {
              "name": "openoffice-shell-command-execution(33113)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33113"
            },
            {
              "name": "oval:org.mitre.oval:def:11422",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11422"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 10.0,
          "obtainAllPrivilege": true,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": true
        }
      },
      "lastModifiedDate": "2017-10-11T01:31Z",
      "publishedDate": "2007-03-21T19:19Z"
    }
  }
}

OPENSUSE-SU-2024:10983-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2026-09-20 20:09

Summary

libreoffice-7.1.5.2-3.13 on GA media

Severity

Moderate

Scope

24 vulnerabilities in this advisory, including CVE-2007-0239.

CVE-2007-0239

Recommended: 576 products

Open the full advisory

RHSA-2007:0033

Vulnerability from csaf_redhat - Published: 2007-03-22 10:37 - Updated: 2026-06-25 10:33

Summary

Red Hat Security Advisory: openoffice.org security update

Severity

Important

Scope

3 vulnerabilities in this advisory, including CVE-2007-0239.

CVE-2007-0239

OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document.

Fixed: 49 products

https://access.redhat.com/errata/RHSA-2007:0033

Open the full advisory

RHSA-2007:0069

Vulnerability from csaf_redhat - Published: 2007-03-22 13:40 - Updated: 2025-11-21 17:31

Summary

Red Hat Security Advisory: openoffice.org security update

Severity

Important

Scope

2 vulnerabilities in this advisory, including CVE-2007-0239.

CVE-2007-0239

OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document.

Fixed: 298 products

https://access.redhat.com/errata/RHSA-2007:0069

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2007-0239 (GCVE-0-2007-0239)

CERTA-2007-AVI-136

Description

Solution

FKIE_CVE-2007-0239

GHSA-RM66-MCP2-MM7M

GSD-2007-0239

OPENSUSE-SU-2024:10983-1

RHSA-2007:0033

RHSA-2007:0069

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour