PT-2006-3173 · Openoffice.Org+1 · Openoffice.Org+1

Ryan Giobbi

·

Publicado

2006-06-30

·

Atualizado

2024-06-15

·

CVE-2006-2198

CVSS v2.0

7.6

Alta

VetorAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions OpenOffice.org versions 1.1.x up to 1.1.5 OpenOffice.org versions 2.0.x before 2.0.3
Description The issue allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious BASIC macro. This macro is executed without prompting the user, potentially leading to unauthorized actions.
Recommendations For versions 1.1.x up to 1.1.5, update to a version outside of this range to mitigate the risk. For versions 2.0.x before 2.0.3, update to version 2.0.3 or later to resolve the issue. As a temporary workaround, consider disabling the execution of BASIC macros in OpenOffice documents until a patch is applied.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2006-2198
DSA-1104
OPENSUSE-SU-2024:10983-1
RHSA-2006:0573
RHSA-2006_0573

Produtos afetados

Openoffice.Org
Red Hat