CVE-2006-3117

security flaw

Published Jun 30, 2006 CVSS 2.0 · 7.6 High EPSS 4.3% KEV · Not listed
Description
Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1104-1 New OpenOffice.org packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1104-2 New OpenOffice.org packages fix arbitrary code execution
EUVD EUVD EUVD-2006-3114 Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."
Ubuntu USN Ubuntu USN USN-313-1 OpenOffice.org vulnerabilities
Ubuntu USN Ubuntu USN USN-313-2 OpenOffice.org vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
debian
Published
Updated
Aug 7, 2024, 6:16 PM
Reserved
Jun 21, 2006, 12:00 AM
Status
Modified
Published
Jun 30, 2006, 6:05 PM
Modified
Jun 16, 2026, 10:26 PM
Severity
Important
Public date
Jun 29, 2006, 12:00 AM