Lucene search

K
cveDebianCVE-2006-2198
HistoryJun 30, 2006 - 6:05 p.m.

CVE-2006-2198

2006-06-3018:05:00
CWE-264
debian
web.nvd.nist.gov
38
cve-2006-2198
openoffice.org
staroffice
unauthorized activities
basic macro
security vulnerability

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

6

Confidence

Low

EPSS

0.019

Percentile

88.7%

OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious BASIC macro, which is executed without prompting the user.

Affected configurations

Nvd
Node
openofficeopenofficeMatch1.1.0
OR
openofficeopenofficeMatch1.1.1
OR
openofficeopenofficeMatch1.1.1a
OR
openofficeopenofficeMatch1.1.1b
OR
openofficeopenofficeMatch1.1.2
OR
openofficeopenofficeMatch1.1.3
OR
openofficeopenofficeMatch1.1.4
OR
openofficeopenofficeMatch1.1.5
OR
openofficeopenofficeMatch2.0.0
OR
openofficeopenofficeMatch2.0.0_rc1
OR
openofficeopenofficeMatch2.0.0_rc2
OR
openofficeopenofficeMatch2.0.0_rc3
OR
openofficeopenofficeMatch2.0.1
OR
openofficeopenofficeMatch2.0.2
OR
openofficeopenofficeMatch2.0.2_rc1
OR
openofficeopenofficeMatch2.0.2_rc2
OR
openofficeopenofficeMatch2.0.2_rc3
OR
openofficeopenofficeMatch2.0.2_rc4
OR
openofficeopenofficeMatch2.0.3_rc3
OR
openofficeopenofficeMatch2.0.3_rc4
OR
openofficeopenofficeMatch2.0.3_rc5
OR
openofficeopenofficeMatch2.0.3_rc6
OR
sunstarofficeMatch7.0
OR
sunstarofficeMatch8.0
VendorProductVersionCPE
sunstaroffice8.0cpe:/a:sun:staroffice:8.0:::
openofficeopenoffice2.0.2+rc3cpe:/a:openoffice:openoffice:2.0.2+rc3:::
openofficeopenoffice2.0.3+rc4cpe:/a:openoffice:openoffice:2.0.3+rc4:::
openofficeopenoffice2.0.1cpe:/a:openoffice:openoffice:2.0.1:::
openofficeopenoffice2.0.0+rc2cpe:/a:openoffice:openoffice:2.0.0+rc2:::
openofficeopenoffice2.0.0+rc1cpe:/a:openoffice:openoffice:2.0.0+rc1:::
openofficeopenoffice2.0.0cpe:/a:openoffice:openoffice:2.0.0:::
openofficeopenoffice1.1.2cpe:/a:openoffice:openoffice:1.1.2:::
openofficeopenoffice2.0.2+rc1cpe:/a:openoffice:openoffice:2.0.2+rc1:::
openofficeopenoffice1.1.5cpe:/a:openoffice:openoffice:1.1.5:::
Rows per page:
1-10 of 241

References

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

6

Confidence

Low

EPSS

0.019

Percentile

88.7%