PT-2006-3173 · Openoffice.Org+1 · Openoffice.Org+1

Ryan Giobbi · Published 2006-06-30 · Updated 2024-06-15 · CVE-2006-2198

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenOffice.org versions 1.1.x up to 1.1.5 OpenOffice.org versions 2.0.x before 2.0.3

Description The issue allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious BASIC macro. This macro is executed without prompting the user, potentially leading to unauthorized actions.

Recommendations For versions 1.1.x up to 1.1.5, update to a version outside of this range to mitigate the risk. For versions 2.0.x before 2.0.3, update to version 2.0.3 or later to resolve the issue. As a temporary workaround, consider disabling the execution of BASIC macros in OpenOffice documents until a patch is applied.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2006-2198

DSA-1104

OPENSUSE-SU-2024:10983-1

RHSA-2006:0573

RHSA-2006_0573

Affected Products

Openoffice.Org

Red Hat

References · 59

• http://secunia.com/advisories/20911 · Vendor Advisory
• http://secunia.com/advisories/20910 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:118 · Vendor Advisory
• http://fedoranews.org/cms/node/2343 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_40_openoffice.html · Vendor Advisory
• http://secunia.com/advisories/20867 · Vendor Advisory
• http://secunia.com/advisories/20975 · Vendor Advisory
• http://secunia.com/advisories/21278 · Vendor Advisory
• http://vupen.com/english/advisories/2006/2621 · Vendor Advisory
• http://ubuntu.com/usn/usn-313-1 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2006-0573.html · Vendor Advisory
• http://debian.org/security/2006/dsa-1104 · Vendor Advisory
• http://secunia.com/advisories/23620 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2198 · Security Note
• http://secunia.com/advisories/20913 · Vendor Advisory