CVE-2007-0245

Heap-based buffer overflow in OpenOffice.org (OOo) 2.2.1 and earlier allows remote attackers to execute arbitrary code via a RTF file with a crafted prtdata tag with a length parameter inconsistency, which causes vtable entries to be overwritten.

🔗 References (56)

• cve@mitreftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc
• cve@mitrehttp://osvdb.org/35378
• cve@mitrehttp://secunia.com/advisories/25648
• cve@mitrehttp://secunia.com/advisories/25650
• cve@mitrehttp://secunia.com/advisories/25673
• cve@mitrehttp://secunia.com/advisories/25705
• cve@mitrehttp://secunia.com/advisories/25862
• cve@mitrehttp://secunia.com/advisories/25894
• cve@mitrehttp://secunia.com/advisories/25905
• cve@mitrehttp://secunia.com/advisories/26010
• cve@mitrehttp://secunia.com/advisories/26022
• cve@mitrehttp://secunia.com/advisories/26476
• cve@mitrehttp://sunsolve.sun.com/search/document.do?assetkey=1-26-102917-1
• cve@mitrehttp://sw.openoffice.org/source/browse/sw/sw/source/filter/rtf/swparrtf.cxx?rev=1.67
• cve@mitrehttp://www.debian.org/security/2007/dsa-1307