CVE-2007-4575: Openoffice

High severity, CVSS 9.3. EPSS: 14.3% chance of exploitation in the next 30 days.

HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via crafted database documents, related to "exposing static java methods."

Affected products

• Openoffice Openoffice: up to and including 2.3; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.3_1 only; version 2.0.4 only; …

Published 2007-12-06. Last modified 2026-06-16.