CVE-2007-2834

Description

Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.

Weakness classification

• CWE-190: Integer Overflow or Wraparound

Primary references

• cve@mitre.org — Issue Tracking, Third Party Advisory
• cve@mitre.org — Broken Link, Third Party Advisory
• cve@mitre.org — Broken Link, Third Party Advisory
• cve@mitre.org — Broken Link, Third Party Advisory
• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory