CVE-2007-4575

Published: Dec 6, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via crafted database documents, related to "exposing static java methods."

Affected (10)

Products: Openoffice: Openoffice

Openoffice

1 product

Openoffice

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Openoffice Openoffice	Up to 2.3
Openoffice Openoffice	Version 2.0.1
Openoffice Openoffice	Version 2.0.2
Openoffice Openoffice	Version 2.0.3
Openoffice Openoffice	Version 2.0.3_1
Openoffice Openoffice	Version 2.0.4
Openoffice Openoffice	Version 2.0beta
Openoffice Openoffice	Version 2.1
Openoffice Openoffice	Version 2.2.1
Openoffice Openoffice	Version 2.2

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (72)

http://bugs.gentoo.org/show_bug.cgi?id=200771

Source: secalert@redhat.com

http://bugs.gentoo.org/show_bug.cgi?id=201799

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00005.html

Source: secalert@redhat.com

http://secunia.com/advisories/27914

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27916

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27928

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/27931

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27972

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28018

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28039

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28286

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28585

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/30100

Source: secalert@redhat.com

Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103141-1

Source: secalert@redhat.com

Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-66-200637-1

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1419

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200712-25.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:095

Source: secalert@redhat.com

http://www.openoffice.org/security/cves/CVE-2007-4575.html

Source: secalert@redhat.com

PatchVendor Advisory

http://www.redhat.com/archives/fedora-package-announce/2007-December/msg00134.html

Source: secalert@redhat.com

http://www.redhat.com/archives/fedora-package-announce/2007-December/msg00155.html

Source: secalert@redhat.com

http://www.redhat.com/archives/fedora-package-announce/2007-December/msg00281.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-1048.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-1090.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0151.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0158.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0213.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/26703

Source: secalert@redhat.com

Patch

http://www.securitytracker.com/id?1019041

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-609-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/4092

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2007/4146

Source: secalert@redhat.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/38882

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10153

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00678.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00753.html

Source: secalert@redhat.com

http://bugs.gentoo.org/show_bug.cgi?id=200771