CVE-2007-2834

Name: CVE-2007-2834
Creator: NVD / NIST
Published: 2007-09-18T21:17:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 11.32%

Last modified Jun 16, 2026

CVE-2007-2834 is a vulnerability of currently unknown severity. Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.. EPSS estimates a 11.32% chance of exploitation in the next 30 days.

Description

Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.

Metrics

EPSS Probability

11.32%

95.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-190

Affected Software

Vendor	Product	Versions
Apache	Openoffice	< 2.3.0
Sun	Staroffice	6.0
Sun	Staroffice	7.0
Sun	Staroffice	8.0
Sun	Starsuite	All versions
Debian	Debian Linux	3.1
Debian	Debian Linux	4.0
Canonical	Ubuntu Linux	6.06
Canonical	Ubuntu Linux	6.10
Canonical	Ubuntu Linux	7.04

References

http://bugs.gentoo.org/show_bug.cgi?id=192818Issue Tracking, Third Party Advisory
http://fedoranews.org/updates/FEDORA-2007-237.shtmlBroken Link, Third Party Advisory
http://fedoranews.org/updates/FEDORA-2007-700.shtmlBroken Link, Third Party Advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=593Broken Link, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2007-09/msg00002.htmlMailing List, Third Party Advisory
http://secunia.com/advisories/26816Third Party Advisory
http://secunia.com/advisories/26817Third Party Advisory
http://secunia.com/advisories/26839Third Party Advisory
http://secunia.com/advisories/26844Third Party Advisory
http://secunia.com/advisories/26855Third Party Advisory
http://secunia.com/advisories/26861Third Party Advisory
http://secunia.com/advisories/26891Third Party Advisory
http://secunia.com/advisories/26903Third Party Advisory
http://secunia.com/advisories/26912Third Party Advisory
http://secunia.com/advisories/27077Third Party Advisory
http://secunia.com/advisories/27087Third Party Advisory
http://secunia.com/advisories/27370Third Party Advisory
http://security.gentoo.org/glsa/glsa-200710-24.xmlThird Party Advisory
http://securitytracker.com/id?1018702Third Party Advisory, VDB Entry
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102994-1Broken Link, Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200190-1Broken Link, Third Party Advisory
http://www.debian.org/security/2007/dsa-1375Patch, Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:186Third Party Advisory, URL Repurposed
http://www.openoffice.org/security/cves/CVE-2007-2834.htmlPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2007-0848.htmlThird Party Advisory
http://www.securityfocus.com/archive/1/479965/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/25690Patch, Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/usn-524-1Broken Link, Third Party Advisory
http://www.vupen.com/english/advisories/2007/3184Third Party Advisory
http://www.vupen.com/english/advisories/2007/3262Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/36656Third Party Advisory, VDB Entry
https://issues.rpath.com/browse/RPL-1740Broken Link, Issue Tracking, Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9967Third Party Advisory
http://bugs.gentoo.org/show_bug.cgi?id=192818Issue Tracking, Third Party Advisory
http://fedoranews.org/updates/FEDORA-2007-237.shtmlBroken Link, Third Party Advisory
http://fedoranews.org/updates/FEDORA-2007-700.shtmlBroken Link, Third Party Advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=593Broken Link, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2007-09/msg00002.htmlMailing List, Third Party Advisory
http://secunia.com/advisories/26816Third Party Advisory
http://secunia.com/advisories/26817Third Party Advisory
http://secunia.com/advisories/26839Third Party Advisory
http://secunia.com/advisories/26844Third Party Advisory
http://secunia.com/advisories/26855Third Party Advisory
http://secunia.com/advisories/26861Third Party Advisory
http://secunia.com/advisories/26891Third Party Advisory
http://secunia.com/advisories/26903Third Party Advisory
http://secunia.com/advisories/26912Third Party Advisory
http://secunia.com/advisories/27077Third Party Advisory
http://secunia.com/advisories/27087Third Party Advisory
http://secunia.com/advisories/27370Third Party Advisory
http://security.gentoo.org/glsa/glsa-200710-24.xmlThird Party Advisory
http://securitytracker.com/id?1018702Third Party Advisory, VDB Entry
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102994-1Broken Link, Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200190-1Broken Link, Third Party Advisory
http://www.debian.org/security/2007/dsa-1375Patch, Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:186Third Party Advisory, URL Repurposed
http://www.openoffice.org/security/cves/CVE-2007-2834.htmlPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2007-0848.htmlThird Party Advisory
http://www.securityfocus.com/archive/1/479965/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/25690Patch, Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/usn-524-1Broken Link, Third Party Advisory
http://www.vupen.com/english/advisories/2007/3184Third Party Advisory
http://www.vupen.com/english/advisories/2007/3262Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/36656Third Party Advisory, VDB Entry
https://issues.rpath.com/browse/RPL-1740Broken Link, Issue Tracking, Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9967Third Party Advisory

Timeline

Published: Sep 18, 2007
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2007-2834?

How severe is CVE-2007-2834?

Severity scoring for CVE-2007-2834 is pending analysis. The EPSS model estimates a 11.32% probability of exploitation in the next 30 days.

How do I fix CVE-2007-2834?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2007-2834?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST