CVE-2007-2834: Apache Openoffice

High severity, CVSS 9.3. EPSS: 12% chance of exploitation in the next 30 days.

Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.

Affected products

• Apache Openoffice: before 2.3.0 (fixed in 2.3.0)
• Canonical Ubuntu Linux: version 6.06 only; version 6.10 only; version 7.04 only
• Debian Debian Linux: version 3.1 only; version 4.0 only
• Sun Staroffice: version 6.0 only; version 7.0 only; version 8.0 only
• Sun Starsuite: any version

Published 2007-09-18. Last modified 2026-06-16.