PT-2006-4015 · Apache+1 · Openoffice.Org+1

Publicado 2006-06-30 · Atualizado 2024-06-15 · CVE-2006-3117

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenOffice.org versions 1.1.x up to 1.1.5 OpenOffice.org versions 2.0.x before 2.0.3

Description A heap-based buffer overflow issue allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by various components, including Calc, Draw, Impress, Math, or Writer.

Recommendations For OpenOffice.org versions 1.1.x up to 1.1.5, update to a version later than 1.1.5 to resolve the issue. For OpenOffice.org versions 2.0.x before 2.0.3, update to version 2.0.3 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2006-3117

DSA-1104

OPENSUSE-SU-2024:10983-1

RHSA-2006:0573

RHSA-2006_0573

Produtos afetados

Openoffice.Org

Red Hat

Referências · 59

• http://secunia.com/advisories/20911 · Aviso do Fabricante
• http://securityfocus.com/bid/18739 · Nota
• http://secunia.com/advisories/20910 · Aviso do Fabricante
• http://securitytracker.com/id?1016414 · Nota
• https://access.redhat.com/security/cve/CVE-2006-2199 · Nota
• https://suse.com/security/cve/CVE-2007-0238 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2006:118 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2006-2198 · Nota
• https://suse.com/security/cve/CVE-2017-7882 · Nota
• http://fedoranews.org/cms/node/2343 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9704 · Nota
• http://novell.com/linux/security/advisories/2006_40_openoffice.html · Aviso do Fabricante
• http://ngssoftware.com/advisories/openoffice.txt · Correção
• https://suse.com/security/cve/CVE-2018-1055 · Nota
• http://secunia.com/advisories/20867 · Aviso do Fabricante