CVE-2006-3117
- State
- Published
- Severity
- Not scored
- Published
- Jun 30, 2006
- Updated
- Aug 7, 2024
- Reserved
- Jun 21, 2006
Description
Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- DSA-1104vendor-advisory
- 102501vendor-advisory
- USN-313-1vendor-advisory
- openoffice-xml-document-bo(27571)vdb-entry
- https://issues.rpath.com/browse/RPL-475
- 20893third-party-advisory
- GLSA-200607-12vendor-advisory
- ADV-2006-2621vdb-entry
- 22129third-party-advisory
- 20060926 rPSA-2006-0173-1 openoffice.orgmailing-list
- 20975third-party-advisory
- 20867third-party-advisory
- 21278third-party-advisory
- http://www.ngssoftware.com/advisories/openoffice.txt
- 18739vdb-entry
- oval:org.mitre.oval:def:9704vdb-entrysignature
- 20910third-party-advisory
- FEDORA-2007-005vendor-advisory
- MDKSA-2006:118vendor-advisory
- 20995third-party-advisory
- 20911third-party-advisory
- http://www.openoffice.org/security/CVE-2006-3117.html
- 1016414vdb-entry
- 23620third-party-advisory
- RHSA-2006:0573vendor-advisory
- SUSE-SA:2006:040vendor-advisory
- 20913third-party-advisory
- USN-313-2vendor-advisory
- ADV-2006-2607vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.