CVE-2007-4575

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 14.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-12-06 · updated 2026-06-16
Weakness: CWE-94

Description

HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via crafted database documents, related to "exposing static java methods."

Affected products

Openoffice: through 2.3; 2.0.1, 2.0.2, 2.0.3, 2.0.3_1, 2.0.4, 2.0beta (+3)

References

http://bugs.gentoo.org/show_bug.cgi?id=200771
http://bugs.gentoo.org/show_bug.cgi?id=201799
http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00005.html
http://secunia.com/advisories/27914
http://secunia.com/advisories/27916
http://secunia.com/advisories/27928
http://secunia.com/advisories/27931
http://secunia.com/advisories/27972
http://secunia.com/advisories/28018
http://secunia.com/advisories/28039
http://secunia.com/advisories/28286
http://secunia.com/advisories/28585

Get alerted when CVE-2007-4575 or the next vulnerability affects your stack