CVE catalog

CVE-2007-5747

openoffice.org

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
4.11% · Oct 25, 2026

Integer underflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted values that trigger an excessive loop and a stack-based buffer overflow. openoffice.org: Quattro Pro files parsing integer underflow

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianopenoffice.org4.02.0.4.dfsg.2-5etch1vulnerable
Debianopenoffice.org4.02.0.4.dfsg.2-5etch2vulnerable
Debianopenoffice.org4.02.0.4.dfsg.2-6vulnerable
Debianopenoffice.org4.02.0.4.dfsg.2-7vulnerable
Debianopenoffice.org4.02.0.4.dfsg.2-7etch1vulnerable
Debianopenoffice.org4.02.0.4.dfsg.2-7etch2vulnerable
Debianopenoffice.org4.02.0.4.dfsg.2-7etch4vulnerable
Debianopenoffice.org4.02.0.4.dfsg.2-7etch5fixed
Debianopenoffice.org3.11.1.3-9vulnerable
Debianopenoffice.org3.11.1.3-9sarge1vulnerable
Debianopenoffice.org3.11.1.3-9sarge2vulnerable
Debianopenoffice.org3.11.1.3-9sarge3vulnerable
Debianopenoffice.org3.11.1.3-9sarge4vulnerable
Debianopenoffice.org3.11.1.3-9sarge5vulnerable
Debianopenoffice.org3.11.1.3-9sarge6vulnerable
Debianopenoffice.org3.11.1.3-9sarge7vulnerable
Debianopenoffice.org3.11.1.3-9sarge8vulnerable
Debianopenoffice.org3.11.1.3-9sarge9fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianopenoffice.orgdeb4.02.0.4.dfsg.2-7etch5Not reportedDSA-1547-1Not reported
Debianopenoffice.orgdeb3.11.1.3-9sarge9Not reportedDSA-1547-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References