PT-2006-3174 · Oracle+1 · Openoffice.Org+1

Publicado 2006-06-30 · Atualizado 2024-06-15 · CVE-2006-2199

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenOffice.org versions 1.1.x up to 1.1.5 OpenOffice.org versions 2.0.x before 2.0.3

Description The issue allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents.

Recommendations For OpenOffice.org versions 1.1.x up to 1.1.5, update to a version later than 1.1.5. For OpenOffice.org versions 2.0.x before 2.0.3, update to version 2.0.3 or later.

Correção

Identificadores relacionados

CVE-2006-2199

DSA-1104

OPENSUSE-SU-2024:10983-1

RHSA-2006:0573

RHSA-2006_0573

Produtos afetados

Openoffice.Org

Red Hat

Referências · 58

• http://secunia.com/advisories/20911 · Aviso do Fabricante
• http://secunia.com/advisories/20910 · Aviso do Fabricante
• http://securitytracker.com/id?1016414 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11338 · Nota
• https://access.redhat.com/security/cve/CVE-2006-2199 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2006:118 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2007-0238 · Nota
• https://access.redhat.com/security/cve/CVE-2006-2198 · Nota
• https://suse.com/security/cve/CVE-2017-7882 · Nota
• http://fedoranews.org/cms/node/2343 · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2006_40_openoffice.html · Aviso do Fabricante
• http://secunia.com/advisories/20867 · Aviso do Fabricante
• http://secunia.com/advisories/20975 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-1055 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-2199 · Nota de Segurança