CVE-2006-2198

Severity Score

7.6

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious BASIC macro, which is executed without prompting the user.

OpenOffice.org (también conocido como StarOffice) v1.1.x a v1.1.5 y v2.0.x anteriores a v2.0.3 permite a los atacantes de usuarios asistidos conducir actividades no autorizadas a través de un documento OpenOffice con una macro BASIC maliciosa, lo que es ejecutad sin confirmación al usuario.

*Credits: N/A

CVSS Scores

NISTv2 7.6

Attack Vector

Network

Attack Complexity

High

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-05-04 CVE Reserved
2006-06-30 CVE Published
2023-11-23 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-264: Permissions, Privileges, and Access Controls

CAPEC

References (31)

URL	Tag	Source
http://securitytracker.com/id?1016414	Vdb Entry
http://www.kb.cert.org/vuls/id/170113	Third Party Advisory
http://www.securityfocus.com/archive/1/447035/100/0/threaded	Mailing List
http://www.securityfocus.com/bid/18738	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/27564	Vdb Entry
https://issues.rpath.com/browse/RPL-475	X_refsource_confirm
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11082	Signature

URL	Date	SRC

URL	Date	SRC
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102490-1	2018-10-18
http://www.openoffice.org/security/CVE-2006-2199.html	2018-10-18

URL	Date	SRC
http://fedoranews.org/cms/node/2343	2018-10-18
http://secunia.com/advisories/20867	2018-10-18
http://secunia.com/advisories/20893	2018-10-18
http://secunia.com/advisories/20910	2018-10-18
http://secunia.com/advisories/20911	2018-10-18
http://secunia.com/advisories/20913	2018-10-18
http://secunia.com/advisories/20975	2018-10-18
http://secunia.com/advisories/20995	2018-10-18
http://secunia.com/advisories/21278	2018-10-18
http://secunia.com/advisories/22129	2018-10-18
http://secunia.com/advisories/23620	2018-10-18
http://security.gentoo.org/glsa/glsa-200607-12.xml	2018-10-18
http://www.debian.org/security/2006/dsa-1104	2018-10-18
http://www.mandriva.com/security/advisories?name=MDKSA-2006:118	2018-10-18
http://www.novell.com/linux/security/advisories/2006_40_openoffice.html	2018-10-18
http://www.redhat.com/support/errata/RHSA-2006-0573.html	2018-10-18
http://www.ubuntu.com/usn/usn-313-1	2018-10-18
http://www.ubuntu.com/usn/usn-313-2	2018-10-18
http://www.vupen.com/english/advisories/2006/2607	2018-10-18
http://www.vupen.com/english/advisories/2006/2621	2018-10-18
https://access.redhat.com/security/cve/CVE-2006-2198	2006-07-03
https://bugzilla.redhat.com/show_bug.cgi?id=1618088	2006-07-03

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				1.1.0 Search vendor "Openoffice" for product "Openoffice" and version "1.1.0"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				1.1.1 Search vendor "Openoffice" for product "Openoffice" and version "1.1.1"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				1.1.1a Search vendor "Openoffice" for product "Openoffice" and version "1.1.1a"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				1.1.1b Search vendor "Openoffice" for product "Openoffice" and version "1.1.1b"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				1.1.2 Search vendor "Openoffice" for product "Openoffice" and version "1.1.2"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				1.1.3 Search vendor "Openoffice" for product "Openoffice" and version "1.1.3"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				1.1.4 Search vendor "Openoffice" for product "Openoffice" and version "1.1.4"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				1.1.5 Search vendor "Openoffice" for product "Openoffice" and version "1.1.5"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				2.0.0 Search vendor "Openoffice" for product "Openoffice" and version "2.0.0"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				2.0.0_rc1 Search vendor "Openoffice" for product "Openoffice" and version "2.0.0_rc1"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				2.0.0_rc2 Search vendor "Openoffice" for product "Openoffice" and version "2.0.0_rc2"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				2.0.0_rc3 Search vendor "Openoffice" for product "Openoffice" and version "2.0.0_rc3"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				2.0.1 Search vendor "Openoffice" for product "Openoffice" and version "2.0.1"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				2.0.2 Search vendor "Openoffice" for product "Openoffice" and version "2.0.2"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				2.0.2_rc1 Search vendor "Openoffice" for product "Openoffice" and version "2.0.2_rc1"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				2.0.2_rc2 Search vendor "Openoffice" for product "Openoffice" and version "2.0.2_rc2"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				2.0.2_rc3 Search vendor "Openoffice" for product "Openoffice" and version "2.0.2_rc3"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				2.0.2_rc4 Search vendor "Openoffice" for product "Openoffice" and version "2.0.2_rc4"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				2.0.3_rc3 Search vendor "Openoffice" for product "Openoffice" and version "2.0.3_rc3"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				2.0.3_rc4 Search vendor "Openoffice" for product "Openoffice" and version "2.0.3_rc4"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				2.0.3_rc5 Search vendor "Openoffice" for product "Openoffice" and version "2.0.3_rc5"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				2.0.3_rc6 Search vendor "Openoffice" for product "Openoffice" and version "2.0.3_rc6"		-		Affected
Sun Search vendor "Sun"		Staroffice Search vendor "Sun" for product "Staroffice"				7.0 Search vendor "Sun" for product "Staroffice" and version "7.0"		-		Affected
Sun Search vendor "Sun"		Staroffice Search vendor "Sun" for product "Staroffice"				8.0 Search vendor "Sun" for product "Staroffice" and version "8.0"		-		Affected