Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2007-2834 Details

Description

Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://bugs.gentoo.org/show_bug.cgi?id=192818	CVE	Issue TrackingThird Party Advisory
http://fedoranews.org/updates/FEDORA-2007-237.shtml	CVE	Broken LinkThird Party Advisory
http://fedoranews.org/updates/FEDORA-2007-700.shtml	CVE	Broken LinkThird Party Advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=593	CVE	Broken LinkThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2007-09/msg00002.html	CVE	Mailing ListThird Party Advisory
http://secunia.com/advisories/26816	CVE	Third Party Advisory
http://secunia.com/advisories/26817	CVE	Third Party Advisory
http://secunia.com/advisories/26839	CVE	Third Party Advisory
http://secunia.com/advisories/26844	CVE	Third Party Advisory
http://secunia.com/advisories/26855	CVE	Third Party Advisory
http://secunia.com/advisories/26861	CVE	Third Party Advisory
http://secunia.com/advisories/26891	CVE	Third Party Advisory
http://secunia.com/advisories/26903	CVE	Third Party Advisory
http://secunia.com/advisories/26912	CVE	Third Party Advisory
http://secunia.com/advisories/27077	CVE	Third Party Advisory
http://secunia.com/advisories/27087	CVE	Third Party Advisory
http://secunia.com/advisories/27370	CVE	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200710-24.xml	CVE	Third Party Advisory
http://securitytracker.com/id?1018702	CVE	Third Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/36656	CVE	Third Party AdvisoryVDB Entry
https://issues.rpath.com/browse/RPL-1740	CVE	Broken LinkIssue TrackingThird Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9967	CVE	Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102994-1	CVE	Broken LinkThird Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200190-1	CVE	Broken LinkThird Party Advisory
http://www.debian.org/security/2007/dsa-1375	CVE	PatchThird Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:186	CVE	Third Party AdvisoryURL Repurposed
http://www.openoffice.org/security/cves/CVE-2007-2834.html	CVE	PatchVendor Advisory
http://www.redhat.com/support/errata/RHSA-2007-0848.html	CVE	Third Party Advisory
http://www.securityfocus.com/archive/1/479965/100/0/threaded	CVE	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/25690	CVE	PatchThird Party AdvisoryVDB Entry
http://www.ubuntu.com/usn/usn-524-1	CVE	Broken LinkThird Party Advisory
http://www.vupen.com/english/advisories/2007/3184	CVE	Third Party Advisory
http://www.vupen.com/english/advisories/2007/3262	CVE	Third Party Advisory
http://bugs.gentoo.org/show_bug.cgi?id=192818	[email protected]	Issue TrackingThird Party Advisory
http://fedoranews.org/updates/FEDORA-2007-237.shtml	[email protected]	Broken LinkThird Party Advisory
http://fedoranews.org/updates/FEDORA-2007-700.shtml	[email protected]	Broken LinkThird Party Advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=593	[email protected]	Broken LinkThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2007-09/msg00002.html	[email protected]	Mailing ListThird Party Advisory
http://secunia.com/advisories/26816	[email protected]	Third Party Advisory
http://secunia.com/advisories/26817	[email protected]	Third Party Advisory
http://secunia.com/advisories/26839	[email protected]	Third Party Advisory
http://secunia.com/advisories/26844	[email protected]	Third Party Advisory
http://secunia.com/advisories/26855	[email protected]	Third Party Advisory
http://secunia.com/advisories/26861	[email protected]	Third Party Advisory
http://secunia.com/advisories/26891	[email protected]	Third Party Advisory
http://secunia.com/advisories/26903	[email protected]	Third Party Advisory
http://secunia.com/advisories/26912	[email protected]	Third Party Advisory
http://secunia.com/advisories/27077	[email protected]	Third Party Advisory
http://secunia.com/advisories/27087	[email protected]	Third Party Advisory
http://secunia.com/advisories/27370	[email protected]	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200710-24.xml	[email protected]	Third Party Advisory
http://securitytracker.com/id?1018702	[email protected]	Third Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/36656	[email protected]	Third Party AdvisoryVDB Entry
https://issues.rpath.com/browse/RPL-1740	[email protected]	Broken LinkIssue TrackingThird Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9967	[email protected]	Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102994-1	[email protected]	Broken LinkThird Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200190-1	[email protected]	Broken LinkThird Party Advisory
http://www.debian.org/security/2007/dsa-1375	[email protected]	PatchThird Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:186	[email protected]	Third Party AdvisoryURL Repurposed
http://www.openoffice.org/security/cves/CVE-2007-2834.html	[email protected]	PatchVendor Advisory
http://www.redhat.com/support/errata/RHSA-2007-0848.html	[email protected]	Third Party Advisory
http://www.securityfocus.com/archive/1/479965/100/0/threaded	[email protected]	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/25690	[email protected]	PatchThird Party AdvisoryVDB Entry
http://www.ubuntu.com/usn/usn-524-1	[email protected]	Broken LinkThird Party Advisory
http://www.vupen.com/english/advisories/2007/3184	[email protected]	Third Party Advisory
http://www.vupen.com/english/advisories/2007/3262	[email protected]	Third Party Advisory

see all 66 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-190	Integer Overflow or Wraparound	[email protected]

Affected Products

Product	Versions
apache openoffice	< 2.3.0
CPE cpe:2.3:a:apache:openoffice:::::::: Remediation No remediation found in references.
sun staroffice	6.0 7.0 8.0
CPE cpe:2.3:a:sun:staroffice:6.0:::::::* cpe:2.3:a:sun:staroffice:7.0:::::::* cpe:2.3:a:sun:staroffice:8.0:::::::* Remediation No remediation found in references.
sun starsuite	All versions
CPE cpe:2.3:a:sun:starsuite:::::::: Remediation No remediation found in references.
debian debian linux	3.1 4.0
CPE cpe:2.3:o:debian:debian_linux:3.1:::::::* cpe:2.3:o:debian:debian_linux:4.0:::::::* Remediation No remediation found in references.
canonical ubuntu linux	6.06 6.10 7.04
CPE cpe:2.3:o:canonical:ubuntu_linux:6.06:::::::* cpe:2.3:o:canonical:ubuntu_linux:6.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:7.04:::::::* Remediation No remediation found in references.

Change History

11 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 23, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Feb 7, 2022	Modified Analysis	[email protected]
Feb 3, 2022	CPE Deprecation Remap	[email protected]
Feb 3, 2022	CPE Deprecation Remap	[email protected]
Oct 16, 2018	CVE Modified	[email protected]
Oct 11, 2017	CVE Modified	[email protected]
Jul 29, 2017	CVE Modified	[email protected]
Sep 20, 2007	Initial Analysis	[email protected]

CVE-2007-2834 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO