PT-2006-4015 · Apache+1 · Openoffice.Org+1

Published 2006-06-30 · Updated 2024-06-15 · CVE-2006-3117

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenOffice.org versions 1.1.x up to 1.1.5 OpenOffice.org versions 2.0.x before 2.0.3

Description A heap-based buffer overflow issue allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by various components, including Calc, Draw, Impress, Math, or Writer.

Recommendations For OpenOffice.org versions 1.1.x up to 1.1.5, update to a version later than 1.1.5 to resolve the issue. For OpenOffice.org versions 2.0.x before 2.0.3, update to version 2.0.3 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2006-3117

DSA-1104

OPENSUSE-SU-2024:10983-1

RHSA-2006:0573

RHSA-2006_0573

Affected Products

Openoffice.Org

Red Hat

References · 59

• http://secunia.com/advisories/20911 · Vendor Advisory
• http://secunia.com/advisories/20910 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:118 · Vendor Advisory
• http://fedoranews.org/cms/node/2343 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_40_openoffice.html · Vendor Advisory
• http://ngssoftware.com/advisories/openoffice.txt · Patch
• http://secunia.com/advisories/20867 · Vendor Advisory
• http://secunia.com/advisories/20975 · Vendor Advisory
• http://secunia.com/advisories/21278 · Vendor Advisory
• http://vupen.com/english/advisories/2006/2621 · Vendor Advisory
• http://ubuntu.com/usn/usn-313-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-3117 · Security Note
• http://redhat.com/support/errata/RHSA-2006-0573.html · Vendor Advisory
• http://debian.org/security/2006/dsa-1104 · Vendor Advisory
• http://secunia.com/advisories/23620 · Vendor Advisory