RCE in Openoffice

CVE-2007-4575

HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via crafted database documents, related to "exposing static java methods."

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.143 (96.2th percentile) — read the EPSS interpretation.

Affected products

  • Openoffice — versions 2.0.1, 2.0.2, 2.0.3
  • N/a — versions n/a

Weakness classification (CWE)

References