PT-2006-3174 · Oracle+1 · Openoffice.Org+1

Published 2006-06-30 · Updated 2024-06-15 · CVE-2006-2199

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenOffice.org versions 1.1.x up to 1.1.5 OpenOffice.org versions 2.0.x before 2.0.3

Description The issue allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents.

Recommendations For OpenOffice.org versions 1.1.x up to 1.1.5, update to a version later than 1.1.5. For OpenOffice.org versions 2.0.x before 2.0.3, update to version 2.0.3 or later.

Fix

Related Identifiers

CVE-2006-2199

DSA-1104

OPENSUSE-SU-2024:10983-1

RHSA-2006:0573

RHSA-2006_0573

Affected Products

Openoffice.Org

Red Hat

References · 58

• http://secunia.com/advisories/20911 · Vendor Advisory
• http://secunia.com/advisories/20910 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:118 · Vendor Advisory
• http://fedoranews.org/cms/node/2343 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_40_openoffice.html · Vendor Advisory
• http://secunia.com/advisories/20867 · Vendor Advisory
• http://secunia.com/advisories/20975 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2199 · Security Note
• http://secunia.com/advisories/21278 · Vendor Advisory
• http://vupen.com/english/advisories/2006/2621 · Vendor Advisory
• http://ubuntu.com/usn/usn-313-1 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2006-0573.html · Vendor Advisory
• http://secunia.com/advisories/23620 · Vendor Advisory
• http://debian.org/security/2006/dsa-1104 · Vendor Advisory
• http://secunia.com/advisories/20913 · Vendor Advisory