Skip to content
OpenAdvisories
Unscored CVE-2007-4575 EUVD-2007-4557GHSA-583w-wjg4-5w8f

HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code…

Published Dec 6, 2007 · Updated Aug 7, 2024 · Assigned by redhat

Package: hsqldb Ecosystem: Debian

Description

HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via crafted database documents, related to "exposing static java methods."

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 hsqldb 1.8.0.9-1 —
Debian 13 hsqldb 1.8.0.9-1 —
Debian 12 hsqldb 1.8.0.9-1 —
Debian 4.0 hsqldb 1.8.0.7-1etch1 DSA-1419-1
Debian 4.0 openoffice.org 2.0.4.dfsg.2-7etch4 DSA-1419-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 5 hsqldb +3 1:1.8.0.4-3jpp.6 RHSA-2007:1048
RHEL 5 openoffice.org +73 1:2.0.4-5.4.25 RHSA-2007:1048
RHEL 4 openoffice.org2 +58 1:2.0.4-5.7.0.3.0 RHSA-2007:1090
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhel Productivity 5 hsqldb +3 1:1.8.0.4-3jpp.6 RHSA-2007:1048
Red Hat Rhel Productivity 5 openoffice.org +73 1:2.0.4-5.4.25 RHSA-2007:1048
Red Hat Rhel Application Stack 1 concurrent 1.3.4-7jpp.ep1.6.el4 RHSA-2008:0158
Red Hat Rhel Application Stack 1 glassfish-jaf 1.1.0-0jpp.ep1.10.el4 RHSA-2008:0158
Red Hat Rhel Application Stack 1 glassfish-javamail 1.4.0-0jpp.ep1.8 RHSA-2008:0158
Red Hat Rhel Application Stack 1 glassfish-jsf 1.2_04-1.p02.0jpp.ep1.18 RHSA-2008:0158
Red Hat Rhel Application Stack 1 glassfish-jstl 1.2.0-0jpp.ep1.2 RHSA-2008:0158
Red Hat Rhel Application Stack 1 hibernate3 +1 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4 RHSA-2008:0158
Red Hat Rhel Application Stack 1 hibernate3-annotations +1 3.2.1-1.patch02.1jpp.ep1.2.el4 RHSA-2008:0158
Red Hat Rhel Application Stack 1 hibernate3-entitymanager +1 3.2.1-1jpp.ep1.6.el4 RHSA-2008:0158
Red Hat Rhel Application Stack 1 hsqldb 1:1.8.0.8-2.patch01.1jpp.ep1.1 RHSA-2008:0158
Red Hat Rhel Application Stack 1 jacorb 2.3.0-1jpp.ep1.4 RHSA-2008:0158
Red Hat Rhel Application Stack 1 jboss-aop 1.5.5-1.CP01.0jpp.ep1.1.el4 RHSA-2008:0158
Red Hat Rhel Application Stack 1 jboss-cache 1.4.1-4.SP8_CP01.1jpp.ep1.1.el4 RHSA-2008:0158
Red Hat Rhel Application Stack 1 jboss-common 1.2.1-0jpp.ep1.2 RHSA-2008:0158
Red Hat Rhel Application Stack 1 jboss-remoting 2.2.2-3.SP4.0jpp.ep1.1 RHSA-2008:0158
Red Hat Rhel Application Stack 1 jboss-seam +1 1.2.1-1.ep1.3.el4 RHSA-2008:0158
Red Hat Rhel Application Stack 1 jbossas 4.2.0-3.GA_CP02.ep1.3.el4 RHSA-2008:0158
Red Hat Rhel Application Stack 1 jbossweb 2.0.0-3.CP05.0jpp.ep1.1 RHSA-2008:0158
Red Hat Rhel Application Stack 1 jbossws-wsconsume-impl 2.0.0-0jpp.ep1.3 RHSA-2008:0158
Red Hat Rhel Application Stack 1 jbossxb 1.0.0-2.SP1.0jpp.ep1.2.el4 RHSA-2008:0158
Red Hat Rhel Application Stack 1 jcommon 1.0.12-1jpp.ep1.2.el4 RHSA-2008:0158
Red Hat Rhel Application Stack 1 jfreechart 1.0.9-1jpp.ep1.2.el4 RHSA-2008:0158
Red Hat Rhel Application Stack 1 jgroups 1:2.4.1-1.SP4.0jpp.ep1.2 RHSA-2008:0158
Red Hat Rhel Application Stack 1 rh-eap-docs +1 4.2.0-3.GA_CP02.ep1.1.el4 RHSA-2008:0158
Red Hat Rhel Application Stack 1 wsdl4j 1.6.2-1jpp.ep1.8 RHSA-2008:0158
Red Hat JBoss EAP 4 glassfish-javamail 1.4.0-0jpp.ep1.8 RHSA-2008:0151
Red Hat JBoss EAP 4 hibernate3 +1 3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1 RHSA-2008:0213, RHSA-2008:0151
Red Hat JBoss EAP 4 hibernate3-annotations +1 3.2.1-1.patch02.1jpp.ep1.2.el4 RHSA-2008:0213, RHSA-2008:0151
Red Hat JBoss EAP 4 hibernate3-entitymanager +1 3.2.1-1jpp.ep1.6.el4 RHSA-2008:0151
Red Hat JBoss EAP 4 hsqldb 1:1.8.0.8-2.patch01.1jpp.ep1.1 RHSA-2008:0151
Red Hat JBoss EAP 4 jacorb +3 2.3.0-1jpp.ep1.4 RHSA-2008:0213, RHSA-2008:0151
Red Hat JBoss EAP 4 jboss-aop 1.5.5-1.CP01.0jpp.ep1.1.el4 RHSA-2008:0213, RHSA-2008:0151
Red Hat JBoss EAP 4 jboss-cache 1.4.1-4.SP8_CP01.1jpp.ep1.1.el4 RHSA-2008:0213, RHSA-2008:0151
Red Hat JBoss EAP 4 jboss-remoting 2.2.2-3.SP4.0jpp.ep1.1 RHSA-2008:0213, RHSA-2008:0151
Red Hat JBoss EAP 4 jboss-seam +1 1.2.1-1.ep1.3.el4 RHSA-2008:0213, RHSA-2008:0151
Red Hat JBoss EAP 4 jbossas 4.2.0-3.GA_CP02.ep1.3.el4 RHSA-2008:0213, RHSA-2008:0151
Red Hat JBoss EAP 4 jbossweb 2.0.0-3.CP05.0jpp.ep1.1 RHSA-2008:0213, RHSA-2008:0151
Red Hat JBoss EAP 4 jbossws-jboss42 1.2.1-0jpp.ep1.2.el4 RHSA-2008:0151
Red Hat JBoss EAP 4 jcommon 1.0.12-1jpp.ep1.2.el4 RHSA-2008:0213, RHSA-2008:0151
Red Hat JBoss EAP 4 jfreechart 1.0.9-1jpp.ep1.2.el4 RHSA-2008:0213, RHSA-2008:0151
Red Hat JBoss EAP 4 jgroups 1:2.4.1-1.SP4.0jpp.ep1.2 RHSA-2008:0151
Red Hat JBoss EAP 4 rh-eap-docs +1 4.2.0-3.GA_CP02.ep1.1.el4 RHSA-2008:0213, RHSA-2008:0151

Advisories 6

References