CVE-2006-3117

2006-06-3018:05:00

CWE-119

debian

web.nvd.nist.gov

cve-2006-3117

buffer overflow

openoffice.org

staroffice

code execution

nvd

vulnerability

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.011

Percentile

84.1%

JSON

Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka “File Format / Buffer Overflow Vulnerability.”

Affected configurations

Nvd

Node

openofficeopenofficeMatch1.1.0

openofficeopenofficeMatch1.1.1

openofficeopenofficeMatch1.1.2

openofficeopenofficeMatch1.1.3

openofficeopenofficeMatch1.1.4

openofficeopenofficeMatch2.0

openofficeopenofficeMatch2.0.0

openofficeopenofficeMatch2.0.1

openofficeopenofficeMatch2.0.2

sunstarofficeMatch6.0

sunstarofficeMatch7.0

sunstarofficeMatch8.0

VendorProductVersionCPE
openofficeopenoffice2.0cpe:/a:openoffice:openoffice:2.0:::
openofficeopenoffice2.0.2cpe:/a:openoffice:openoffice:2.0.2:::
sunstaroffice8.0cpe:/a:sun:staroffice:8.0:::
openofficeopenoffice1.1.1cpe:/a:openoffice:openoffice:1.1.1:::
sunstaroffice6.0cpe:/a:sun:staroffice:6.0:::
openofficeopenoffice2.0.0cpe:/a:openoffice:openoffice:2.0.0:::
openofficeopenoffice2.0.1cpe:/a:openoffice:openoffice:2.0.1:::
openofficeopenoffice1.1.4cpe:/a:openoffice:openoffice:1.1.4:::
sunstaroffice7.0cpe:/a:sun:staroffice:7.0:::
openofficeopenoffice1.1.3cpe:/a:openoffice:openoffice:1.1.3:::

Vendor	Product	Version	CPE
openoffice	openoffice	2.0	cpe:/a:openoffice:openoffice:2.0:::
openoffice	openoffice	2.0.2	cpe:/a:openoffice:openoffice:2.0.2:::
sun	staroffice	8.0	cpe:/a:sun:staroffice:8.0:::
openoffice	openoffice	1.1.1	cpe:/a:openoffice:openoffice:1.1.1:::
sun	staroffice	6.0	cpe:/a:sun:staroffice:6.0:::
openoffice	openoffice	2.0.0	cpe:/a:openoffice:openoffice:2.0.0:::
openoffice	openoffice	2.0.1	cpe:/a:openoffice:openoffice:2.0.1:::
openoffice	openoffice	1.1.4	cpe:/a:openoffice:openoffice:1.1.4:::
sun	staroffice	7.0	cpe:/a:sun:staroffice:7.0:::
openoffice	openoffice	1.1.3	cpe:/a:openoffice:openoffice:1.1.3:::