Buffer overflow in Openoffice
CVE-2006-3117
Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."
Vulnerability class: Buffer Overflow
EPSS: 0.044 (90.2th percentile) — read the EPSS interpretation.
Affected products
- Openoffice — versions 1.1.0, 1.1.1, 1.1.2
- Sun Staroffice — versions 6.0, 7.0, 8.0
- N/a — versions n/a
Weakness classification (CWE)
References
- security@debian.org (vendor-advisory, x_refsource_DEBIAN)
- security@debian.org (vendor-advisory, Patch, x_refsource_SUNALERT)
- security@debian.org (x_refsource_UBUNTU, vendor-advisory)
- security@debian.org (vdb-entry, x_refsource_XF)
- security@debian.org (x_refsource_CONFIRM)
- security@debian.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- security@debian.org (vendor-advisory, x_refsource_GENTOO)
- security@debian.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- security@debian.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- security@debian.org (mailing-list, x_refsource_BUGTRAQ)