CVE-2006-5870

2006-12-3100:00:00

ubuntu.com

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.118

Percentile

95.3%

JSON

Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and
possibly other versions before 2.1.0; and StarOffice 6 through 8; allow
user-assisted remote attackers to execute arbitrary code via a crafted (a)
WMF or (b) EMF file that triggers heap-based buffer overflows in (1)
wmf/winwmf.cxx, during processing of META_ESCAPE records; and
wmf/enhwmf.cxx, during processing of (2) EMR_POLYPOLYGON and (3)
EMR_POLYPOLYGON16 records.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchopenoffice.org< 2.0.2-2ubuntu12.4UNKNOWN
ubuntu6.06noarchopenoffice.org-amd64< 2.0.2-2ubuntu12.4-1UNKNOWN
ubuntu7.04noarchopenoffice.org-l10n< 2.2.0-0ubuntu2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	openoffice.org	< 2.0.2-2ubuntu12.4	UNKNOWN
ubuntu	6.06	noarch	openoffice.org-amd64	< 2.0.2-2ubuntu12.4-1	UNKNOWN
ubuntu	7.04	noarch	openoffice.org-l10n	< 2.2.0-0ubuntu2	UNKNOWN