Vulnerability-Lookup

CVE-2007-0238 (GCVE-0-2007-0238)

Vulnerability from cvelistv5 – Published: 2007-03-21 19:00 – Updated: 2024-08-07 12:12

Summary

Stack-based buffer overflow in filter\starcalc\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to execute arbitrary code via a document with a long Note.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

28 references

URL	Tags
http://www.gentoo.org/security/en/glsa/glsa-20070…	vendor-advisoryx_refsource_GENTOO
http://www.ngssoftware.com/advisories/high-risk-v…	x_refsource_MISC
http://secunia.com/advisories/24588	third-party-advisoryx_refsource_SECUNIA
https://issues.foresightlinux.org/browse/FL-211	x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/24810	third-party-advisoryx_refsource_SECUNIA
http://lists.suse.com/archive/suse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.redhat.com/support/errata/RHSA-2007-00…	vendor-advisoryx_refsource_REDHAT
http://www.vupen.com/english/advisories/2007/1032	vdb-entryx_refsource_VUPEN
http://www.ubuntu.com/usn/usn-444-1	vendor-advisoryx_refsource_UBUNTU
http://www.openoffice.org/security/CVE-2007-0238	x_refsource_CONFIRM
http://secunia.com/advisories/24613	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/24676	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/24550	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/24465	third-party-advisoryx_refsource_SECUNIA
http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
http://www.securityfocus.com/bid/23067	vdb-entryx_refsource_BID
http://www.debian.org/security/2007/dsa-1270	vendor-advisoryx_refsource_DEBIAN
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/24646	third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id?1017799	vdb-entryx_refsource_SECTRACK
http://www.redhat.com/support/errata/RHSA-2007-00…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/24647	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/1117	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/24906	third-party-advisoryx_refsource_SECUNIA
https://issues.rpath.com/browse/RPL-1118	x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/464724/100…	mailing-listx_refsource_BUGTRAQ

Date Public

2007-03-20 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:12:17.713Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-200704-12",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-openoffice-suite/"
          },
          {
            "name": "24588",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24588"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.foresightlinux.org/browse/FL-211"
          },
          {
            "name": "oval:org.mitre.oval:def:8968",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8968"
          },
          {
            "name": "24810",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24810"
          },
          {
            "name": "SUSE-SA:2007:023",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html"
          },
          {
            "name": "RHSA-2007:0033",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0033.html"
          },
          {
            "name": "ADV-2007-1032",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/1032"
          },
          {
            "name": "USN-444-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-444-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.openoffice.org/security/CVE-2007-0238"
          },
          {
            "name": "24613",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24613"
          },
          {
            "name": "24676",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24676"
          },
          {
            "name": "24550",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24550"
          },
          {
            "name": "24465",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24465"
          },
          {
            "name": "102794",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102794-1"
          },
          {
            "name": "23067",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/23067"
          },
          {
            "name": "DSA-1270",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1270"
          },
          {
            "name": "openoffice-starcalc-bo(33112)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33112"
          },
          {
            "name": "MDKSA-2007:073",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:073"
          },
          {
            "name": "24646",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24646"
          },
          {
            "name": "1017799",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1017799"
          },
          {
            "name": "RHSA-2007:0069",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0069.html"
          },
          {
            "name": "24647",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24647"
          },
          {
            "name": "ADV-2007-1117",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/1117"
          },
          {
            "name": "24906",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24906"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1118"
          },
          {
            "name": "20070404 High Risk Vulnerability in OpenOffice",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/464724/100/0/threaded"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-03-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in filter\\starcalc\\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to execute arbitrary code via a document with a long Note."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-16T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "GLSA-200704-12",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-openoffice-suite/"
        },
        {
          "name": "24588",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24588"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.foresightlinux.org/browse/FL-211"
        },
        {
          "name": "oval:org.mitre.oval:def:8968",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8968"
        },
        {
          "name": "24810",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24810"
        },
        {
          "name": "SUSE-SA:2007:023",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html"
        },
        {
          "name": "RHSA-2007:0033",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0033.html"
        },
        {
          "name": "ADV-2007-1032",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/1032"
        },
        {
          "name": "USN-444-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-444-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.openoffice.org/security/CVE-2007-0238"
        },
        {
          "name": "24613",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24613"
        },
        {
          "name": "24676",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24676"
        },
        {
          "name": "24550",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24550"
        },
        {
          "name": "24465",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24465"
        },
        {
          "name": "102794",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102794-1"
        },
        {
          "name": "23067",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/23067"
        },
        {
          "name": "DSA-1270",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1270"
        },
        {
          "name": "openoffice-starcalc-bo(33112)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33112"
        },
        {
          "name": "MDKSA-2007:073",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:073"
        },
        {
          "name": "24646",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24646"
        },
        {
          "name": "1017799",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1017799"
        },
        {
          "name": "RHSA-2007:0069",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0069.html"
        },
        {
          "name": "24647",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24647"
        },
        {
          "name": "ADV-2007-1117",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/1117"
        },
        {
          "name": "24906",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24906"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1118"
        },
        {
          "name": "20070404 High Risk Vulnerability in OpenOffice",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/464724/100/0/threaded"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-0238",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in filter\\starcalc\\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to execute arbitrary code via a document with a long Note."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-200704-12",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml"
            },
            {
              "name": "http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-openoffice-suite/",
              "refsource": "MISC",
              "url": "http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-openoffice-suite/"
            },
            {
              "name": "24588",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24588"
            },
            {
              "name": "https://issues.foresightlinux.org/browse/FL-211",
              "refsource": "CONFIRM",
              "url": "https://issues.foresightlinux.org/browse/FL-211"
            },
            {
              "name": "oval:org.mitre.oval:def:8968",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8968"
            },
            {
              "name": "24810",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24810"
            },
            {
              "name": "SUSE-SA:2007:023",
              "refsource": "SUSE",
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html"
            },
            {
              "name": "RHSA-2007:0033",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0033.html"
            },
            {
              "name": "ADV-2007-1032",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/1032"
            },
            {
              "name": "USN-444-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-444-1"
            },
            {
              "name": "http://www.openoffice.org/security/CVE-2007-0238",
              "refsource": "CONFIRM",
              "url": "http://www.openoffice.org/security/CVE-2007-0238"
            },
            {
              "name": "24613",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24613"
            },
            {
              "name": "24676",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24676"
            },
            {
              "name": "24550",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24550"
            },
            {
              "name": "24465",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24465"
            },
            {
              "name": "102794",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102794-1"
            },
            {
              "name": "23067",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/23067"
            },
            {
              "name": "DSA-1270",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1270"
            },
            {
              "name": "openoffice-starcalc-bo(33112)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33112"
            },
            {
              "name": "MDKSA-2007:073",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:073"
            },
            {
              "name": "24646",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24646"
            },
            {
              "name": "1017799",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1017799"
            },
            {
              "name": "RHSA-2007:0069",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0069.html"
            },
            {
              "name": "24647",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24647"
            },
            {
              "name": "ADV-2007-1117",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/1117"
            },
            {
              "name": "24906",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24906"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1118",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1118"
            },
            {
              "name": "20070404 High Risk Vulnerability in OpenOffice",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/464724/100/0/threaded"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-0238",
    "datePublished": "2007-03-21T19:00:00.000Z",
    "dateReserved": "2007-01-16T00:00:00.000Z",
    "dateUpdated": "2024-08-07T12:12:17.713Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2007-0238",
      "date": "2026-09-18",
      "epss": "0.05748",
      "percentile": "0.92713"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:openoffice:openoffice:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C404C9AA-E1F8-4431-8706-4BB416D19454",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Stack-based buffer overflow in filter\\starcalc\\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to execute arbitrary code via a document with a long Note."
          },
          {
            "lang": "es",
            "value": "Un desbordamiento de b\u00fafer en la regi\u00f3n stack de la memoria en el archivo filter\\starcalc\\scflt.cxx en el analizador StarCalc en OpenOffice.org (OOo) Office Suite anterior a versi\u00f3n 2.2 y versi\u00f3n 1.x anterior a 1.1.5 parche, permite a los atacantes remotos asistidos por el usuario ejecutar c\u00f3digo arbitrario por medio de un documento con una Nota larga."
          }
        ],
        "id": "CVE-2007-0238",
        "lastModified": "2026-04-23T00:35:47.467",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 9.3,
                "confidentialityImpact": "COMPLETE",
                "integrityImpact": "COMPLETE",
                "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 8.6,
              "impactScore": 10.0,
              "obtainAllPrivilege": true,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": true
            }
          ]
        },
        "published": "2007-03-21T19:19:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24465"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24550"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24588"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24613"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24646"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24647"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24676"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24810"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24906"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102794-1"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1270"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:073"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-openoffice-suite/"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.openoffice.org/security/CVE-2007-0238"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0033.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0069.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/archive/1/464724/100/0/threaded"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/23067"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securitytracker.com/id?1017799"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.ubuntu.com/usn/usn-444-1"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/1032"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/1117"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33112"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://issues.foresightlinux.org/browse/FL-211"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://issues.rpath.com/browse/RPL-1118"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8968"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24465"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24550"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24588"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24613"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24646"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24647"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24676"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24810"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24906"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102794-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1270"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:073"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-openoffice-suite/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.openoffice.org/security/CVE-2007-0238"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0033.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0069.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/464724/100/0/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/23067"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securitytracker.com/id?1017799"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.ubuntu.com/usn/usn-444-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/1032"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/1117"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33112"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://issues.foresightlinux.org/browse/FL-211"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://issues.rpath.com/browse/RPL-1118"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8968"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-119"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2025-11-21T13:20:22+00:00",
      "cve": "CVE-2007-0238",
      "id": "CVE-2007-0238",
      "initial_release_date": "2007-03-20T00:00:00+00:00",
      "product_status:fixed": "362",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "security flaw",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2007/cve-2007-0238.json",
      "version": "3"
    }
  }
}

CERTA-2007-AVI-136

Vulnerability from certfr_avis - Published: 2007-03-21 - Updated: 2007-04-02

De multiples vulnérabilités présentes dans OpenOffice.org permettent à un utilisateur distant d'exécuter du code arbitraire.

Description

Trois vulnérabilités sont présentent dans OpenOffice.org :

la première est due au fait que OpenOffice.org embarque dans son code la bibliothèque de fonctions libwpd mettant en œuvre le support des fichiers WordPerfect dans OpenOffice.org. Or, cette bibliothèque de fonction est vulnérable et permet l'exécution de code arbitraire (CERTA-2007-AVI-135) ;
la deuxième vulnérabilité concerne le composant tableur de OpenOffice.org qui comporte une faille de type débordement de mémoire permettant l'exécution de code arbitraire ;
la dernière vulnérabilité est, quant à elle, due à un manque de contrôle des paramètres passés en ligne de commande à OpenOffice.org. Ceci permet à un utilisateur malintentionné d'exécuter du code arbitraire à distance par le biais d'un lien construit de façon particulière.

Solution

La version 2.2 corrige les problèmes.

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
OpenOffice	N/A	OpenOffice.org versions 2.1.0 et antérieures.
OpenOffice	N/A	OpenOffice.org versions 1.0.3.1 et antérieures ;
OpenOffice	N/A	OpenOffice.org versions 1.1.5 et antérieures ;

References

Title

Publication Time

FKIE_CVE-2007-0238

Vulnerability from fkie_nvd - Published: 2007-03-21 19:19 - Updated: 2026-06-16 22:35

Severity

Summary

References

URL	Tags
cve@mitre.org	http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html
cve@mitre.org	http://secunia.com/advisories/24465	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/24550	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/24588	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/24613	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/24646	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/24647	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/24676	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/24810	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/24906	Vendor Advisory
cve@mitre.org	http://sunsolve.sun.com/search/document.do?assetkey=1-26-102794-1
cve@mitre.org	http://www.debian.org/security/2007/dsa-1270	Vendor Advisory
cve@mitre.org	http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml
cve@mitre.org	http://www.mandriva.com/security/advisories?name=MDKSA-2007:073
cve@mitre.org	http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-openoffice-suite/
cve@mitre.org	http://www.openoffice.org/security/CVE-2007-0238
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2007-0033.html
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2007-0069.html
cve@mitre.org	http://www.securityfocus.com/archive/1/464724/100/0/threaded
cve@mitre.org	http://www.securityfocus.com/bid/23067
cve@mitre.org	http://www.securitytracker.com/id?1017799
cve@mitre.org	http://www.ubuntu.com/usn/usn-444-1
cve@mitre.org	http://www.vupen.com/english/advisories/2007/1032	Vendor Advisory
cve@mitre.org	http://www.vupen.com/english/advisories/2007/1117	Vendor Advisory
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/33112
cve@mitre.org	https://issues.foresightlinux.org/browse/FL-211
cve@mitre.org	https://issues.rpath.com/browse/RPL-1118
cve@mitre.org	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8968
af854a3a-2127-422b-91ae-364da2661108	http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24465	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24550	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24588	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24613	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24646	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24647	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24676	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24810	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24906	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://sunsolve.sun.com/search/document.do?assetkey=1-26-102794-1
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2007/dsa-1270	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDKSA-2007:073
af854a3a-2127-422b-91ae-364da2661108	http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-openoffice-suite/
af854a3a-2127-422b-91ae-364da2661108	http://www.openoffice.org/security/CVE-2007-0238
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2007-0033.html
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2007-0069.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/464724/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/23067
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id?1017799
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/usn-444-1
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2007/1032	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2007/1117	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/33112
af854a3a-2127-422b-91ae-364da2661108	https://issues.foresightlinux.org/browse/FL-211
af854a3a-2127-422b-91ae-364da2661108	https://issues.rpath.com/browse/RPL-1118
af854a3a-2127-422b-91ae-364da2661108	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8968

Impacted products

	Vendor	Product	Version
	openoffice	openoffice	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:openoffice:openoffice:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C404C9AA-E1F8-4431-8706-4BB416D19454",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in filter\\starcalc\\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to execute arbitrary code via a document with a long Note."
    },
    {
      "lang": "es",
      "value": "Un desbordamiento de b\u00fafer en la regi\u00f3n stack de la memoria en el archivo filter\\starcalc\\scflt.cxx en el analizador StarCalc en OpenOffice.org (OOo) Office Suite anterior a versi\u00f3n 2.2 y versi\u00f3n 1.x anterior a 1.1.5 parche, permite a los atacantes remotos asistidos por el usuario ejecutar c\u00f3digo arbitrario por medio de un documento con una Nota larga."
    }
  ],
  "id": "CVE-2007-0238",
  "lastModified": "2026-06-16T22:35:10.923",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.3,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2007-03-21T19:19:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24465"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24550"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24588"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24613"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24646"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24647"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24676"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24810"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24906"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102794-1"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.debian.org/security/2007/dsa-1270"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:073"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-openoffice-suite/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.openoffice.org/security/CVE-2007-0238"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0033.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0069.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/464724/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/23067"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1017799"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/usn-444-1"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2007/1032"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2007/1117"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33112"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://issues.foresightlinux.org/browse/FL-211"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://issues.rpath.com/browse/RPL-1118"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8968"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24465"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24550"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24588"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24613"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24646"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24647"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24676"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24810"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24906"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102794-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.debian.org/security/2007/dsa-1270"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:073"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-openoffice-suite/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.openoffice.org/security/CVE-2007-0238"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0033.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0069.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/464724/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/23067"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1017799"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/usn-444-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2007/1032"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2007/1117"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33112"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://issues.foresightlinux.org/browse/FL-211"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://issues.rpath.com/browse/RPL-1118"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8968"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-6798-2HM2-F9XC

Vulnerability from github – Published: 2022-05-01 17:42 – Updated: 2025-04-09 03:39

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2007-0238"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2007-03-21T19:19:00Z",
    "severity": "HIGH"
  },
  "details": "Stack-based buffer overflow in filter\\starcalc\\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to execute arbitrary code via a document with a long Note.",
  "id": "GHSA-6798-2hm2-f9xc",
  "modified": "2025-04-09T03:39:10Z",
  "published": "2022-05-01T17:42:37Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0238"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33112"
    },
    {
      "type": "WEB",
      "url": "https://issues.foresightlinux.org/browse/FL-211"
    },
    {
      "type": "WEB",
      "url": "https://issues.rpath.com/browse/RPL-1118"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8968"
    },
    {
      "type": "WEB",
      "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24465"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24550"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24588"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24613"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24646"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24647"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24676"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24810"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24906"
    },
    {
      "type": "WEB",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102794-1"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2007/dsa-1270"
    },
    {
      "type": "WEB",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:073"
    },
    {
      "type": "WEB",
      "url": "http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-openoffice-suite"
    },
    {
      "type": "WEB",
      "url": "http://www.openoffice.org/security/CVE-2007-0238"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0033.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0069.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/464724/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/23067"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1017799"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/usn-444-1"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/1032"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/1117"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2007-0238

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Aliases

CVE-2007-0238

Aliases

CVE-2007-0238

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2007-0238",
    "description": "Stack-based buffer overflow in filter\\starcalc\\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to execute arbitrary code via a document with a long Note.",
    "id": "GSD-2007-0238",
    "references": [
      "https://www.suse.com/security/cve/CVE-2007-0238.html",
      "https://www.debian.org/security/2007/dsa-1270",
      "https://access.redhat.com/errata/RHSA-2007:0069",
      "https://access.redhat.com/errata/RHSA-2007:0033",
      "https://linux.oracle.com/cve/CVE-2007-0238.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2007-0238"
      ],
      "details": "Stack-based buffer overflow in filter\\starcalc\\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to execute arbitrary code via a document with a long Note.",
      "id": "GSD-2007-0238",
      "modified": "2023-12-13T01:21:35.809315Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2007-0238",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Stack-based buffer overflow in filter\\starcalc\\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to execute arbitrary code via a document with a long Note."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "GLSA-200704-12",
            "refsource": "GENTOO",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml"
          },
          {
            "name": "http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-openoffice-suite/",
            "refsource": "MISC",
            "url": "http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-openoffice-suite/"
          },
          {
            "name": "24588",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24588"
          },
          {
            "name": "https://issues.foresightlinux.org/browse/FL-211",
            "refsource": "CONFIRM",
            "url": "https://issues.foresightlinux.org/browse/FL-211"
          },
          {
            "name": "oval:org.mitre.oval:def:8968",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8968"
          },
          {
            "name": "24810",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24810"
          },
          {
            "name": "SUSE-SA:2007:023",
            "refsource": "SUSE",
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html"
          },
          {
            "name": "RHSA-2007:0033",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0033.html"
          },
          {
            "name": "ADV-2007-1032",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/1032"
          },
          {
            "name": "USN-444-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/usn-444-1"
          },
          {
            "name": "http://www.openoffice.org/security/CVE-2007-0238",
            "refsource": "CONFIRM",
            "url": "http://www.openoffice.org/security/CVE-2007-0238"
          },
          {
            "name": "24613",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24613"
          },
          {
            "name": "24676",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24676"
          },
          {
            "name": "24550",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24550"
          },
          {
            "name": "24465",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24465"
          },
          {
            "name": "102794",
            "refsource": "SUNALERT",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102794-1"
          },
          {
            "name": "23067",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/23067"
          },
          {
            "name": "DSA-1270",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2007/dsa-1270"
          },
          {
            "name": "openoffice-starcalc-bo(33112)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33112"
          },
          {
            "name": "MDKSA-2007:073",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:073"
          },
          {
            "name": "24646",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24646"
          },
          {
            "name": "1017799",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id?1017799"
          },
          {
            "name": "RHSA-2007:0069",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0069.html"
          },
          {
            "name": "24647",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24647"
          },
          {
            "name": "ADV-2007-1117",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/1117"
          },
          {
            "name": "24906",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24906"
          },
          {
            "name": "https://issues.rpath.com/browse/RPL-1118",
            "refsource": "CONFIRM",
            "url": "https://issues.rpath.com/browse/RPL-1118"
          },
          {
            "name": "20070404 High Risk Vulnerability in OpenOffice",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/464724/100/0/threaded"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:openoffice:openoffice:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-0238"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Stack-based buffer overflow in filter\\starcalc\\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to execute arbitrary code via a document with a long Note."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-119"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-1270",
              "refsource": "DEBIAN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.debian.org/security/2007/dsa-1270"
            },
            {
              "name": "1017799",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id?1017799"
            },
            {
              "name": "RHSA-2007:0033",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0033.html"
            },
            {
              "name": "RHSA-2007:0069",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0069.html"
            },
            {
              "name": "102794",
              "refsource": "SUNALERT",
              "tags": [],
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102794-1"
            },
            {
              "name": "SUSE-SA:2007:023",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html"
            },
            {
              "name": "USN-444-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/usn-444-1"
            },
            {
              "name": "24465",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24465"
            },
            {
              "name": "24550",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24550"
            },
            {
              "name": "24646",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24646"
            },
            {
              "name": "24647",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24647"
            },
            {
              "name": "https://issues.foresightlinux.org/browse/FL-211",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://issues.foresightlinux.org/browse/FL-211"
            },
            {
              "name": "MDKSA-2007:073",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:073"
            },
            {
              "name": "24676",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24676"
            },
            {
              "name": "http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-openoffice-suite/",
              "refsource": "MISC",
              "tags": [],
              "url": "http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-openoffice-suite/"
            },
            {
              "name": "http://www.openoffice.org/security/CVE-2007-0238",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.openoffice.org/security/CVE-2007-0238"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1118",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://issues.rpath.com/browse/RPL-1118"
            },
            {
              "name": "24810",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24810"
            },
            {
              "name": "GLSA-200704-12",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml"
            },
            {
              "name": "24906",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24906"
            },
            {
              "name": "23067",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/23067"
            },
            {
              "name": "24588",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24588"
            },
            {
              "name": "24613",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24613"
            },
            {
              "name": "ADV-2007-1032",
              "refsource": "VUPEN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.vupen.com/english/advisories/2007/1032"
            },
            {
              "name": "ADV-2007-1117",
              "refsource": "VUPEN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.vupen.com/english/advisories/2007/1117"
            },
            {
              "name": "openoffice-starcalc-bo(33112)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33112"
            },
            {
              "name": "oval:org.mitre.oval:def:8968",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8968"
            },
            {
              "name": "20070404 High Risk Vulnerability in OpenOffice",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/464724/100/0/threaded"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 10.0,
          "obtainAllPrivilege": true,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": true
        }
      },
      "lastModifiedDate": "2018-10-16T16:31Z",
      "publishedDate": "2007-03-21T19:19Z"
    }
  }
}

OPENSUSE-SU-2024:10983-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00

Summary

libreoffice-7.1.5.2-3.13 on GA media

Severity

Moderate

Scope

24 vulnerabilities in this advisory, including CVE-2007-0238.

CVE-2007-0238

Recommended: 576 products

Open the full advisory

RHSA-2007:0033

Vulnerability from csaf_redhat - Published: 2007-03-22 10:37 - Updated: 2026-06-25 10:33

Summary

Red Hat Security Advisory: openoffice.org security update

Severity

Important

Scope

3 vulnerabilities in this advisory, including CVE-2007-0238.

CVE-2007-0238

Fixed: 49 products

https://access.redhat.com/errata/RHSA-2007:0033

Open the full advisory

RHSA-2007:0069

Vulnerability from csaf_redhat - Published: 2007-03-22 13:40 - Updated: 2025-11-21 17:31

Summary

Red Hat Security Advisory: openoffice.org security update

Severity

Important

Scope

2 vulnerabilities in this advisory, including CVE-2007-0238.

CVE-2007-0238

Fixed: 298 products

https://access.redhat.com/errata/RHSA-2007:0069

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2007-0238 (GCVE-0-2007-0238)

CERTA-2007-AVI-136

Description

Solution

FKIE_CVE-2007-0238

GHSA-6798-2HM2-F9XC

GSD-2007-0238

OPENSUSE-SU-2024:10983-1

RHSA-2007:0033

RHSA-2007:0069

Tags

Sightings

Nomenclature

Related by attack behaviour