CVE-2006-5870
- State
- Published
- Severity
- Not scored
- Published
- Jan 4, 2007
- Updated
- Aug 7, 2024
- Reserved
- Nov 14, 2006
Description
Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to execute arbitrary code via a crafted (a) WMF or (b) EMF file that triggers heap-based buffer overflows in (1) wmf/winwmf.cxx, during processing of META_ESCAPE records; and wmf/enhwmf.cxx, during processing of (2) EMR_POLYPOLYGON and (3) EMR_POLYPOLYGON16 records.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- oval:org.mitre.oval:def:9145vdb-entrysignature
- http://www.openoffice.org/issues/show_bug.cgi?id=70042
- 23683third-party-advisory
- http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-staroffice-suite/
- 23682third-party-advisory
- 32611vdb-entry
- 20070104 Correction (High Risk Vulnerability in the OpenOffice and StarOffice Suites)mailing-list
- 23920third-party-advisory
- 23600third-party-advisory
- USN-406-1vendor-advisory
- VU#220288third-party-advisory
- 23612third-party-advisory
- 102735vendor-advisory
- SUSE-SA:2007:001vendor-advisory
- 20070104 High Risk Vulnerability in the OpenOffice and StarOffice Suitesmailing-list
- 23711third-party-advisory
- GLSA-200701-07vendor-advisory
- 32610vdb-entry
- ADV-2007-0031vdb-entry
- 23712third-party-advisory
- 20070104 Re: [VulnWatch] High Risk Vulnerability in the OpenOffice and StarOffice Suitesmailing-list
- 23616third-party-advisory
- RHSA-2007:0001vendor-advisory
- FEDORA-2007-005vendor-advisory
- https://issues.rpath.com/browse/RPL-905
- http://www.openoffice.org/nonav/issues/showattachment.cgi/39509/alloc.overflows.wmf.patch
- 20070104 Re: [VulnWatch] High Risk Vulnerability in the OpenOffice and StarOffice Suitesmailing-list
- oval:org.mitre.oval:def:8280vdb-entrysignature
- 23620third-party-advisory
- openoffice-wmf-bo(31257)vdb-entry
- 23549third-party-advisory
- ADV-2007-0059vdb-entry
- 20070104 High Risk Vulnerability in the OpenOffice and StarOffice Suitesmailing-list
- 20070108 rPSA-2007-0001-1 openoffice.orgmailing-list
- DSA-1246vendor-advisory
- MDKSA-2007:006vendor-advisory
- 1017466vdb-entry
- 23762third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.