Integer Overflow in TIFF Parser Affecting OpenOffice.org and Sun StarOffice

CVE-2007-2834

What is CVE-2007-2834?

The TIFF parser in OpenOffice.org prior to version 2.3 and Sun StarOffice 6, 7, and 8 is vulnerable to an integer overflow. This occurs when the parser processes a specially crafted TIFF file with manipulated field values. Such exploitation can lead to the allocation of incorrect memory amounts, ultimately causing a heap-based buffer overflow which may allow remote attackers to execute arbitrary code on the victim's machine. As a result, users of affected versions are at risk of exploitation through malicious TIFF files.

References