CVE-2006-3117

Severity Score

7.6

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."

*Credits: N/A

CVSS Scores

NISTv2 7.6

Attack Vector

Network

Attack Complexity

High

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-06-21 CVE Reserved
2006-06-30 CVE Published
2024-01-10 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (31)

URL	Tag	Source
http://securitytracker.com/id?1016414	Vdb Entry
http://www.securityfocus.com/archive/1/447035/100/0/threaded	Mailing List
http://www.securityfocus.com/bid/18739	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/27571	Vdb Entry
https://issues.rpath.com/browse/RPL-475	X_refsource_confirm
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9704	Signature

URL	Date	SRC

URL	Date	SRC
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102501-1	2018-10-18
http://www.ngssoftware.com/advisories/openoffice.txt	2018-10-18
http://www.openoffice.org/security/CVE-2006-3117.html	2018-10-18

URL	Date	SRC
http://fedoranews.org/cms/node/2343	2018-10-18
http://secunia.com/advisories/20867	2018-10-18
http://secunia.com/advisories/20893	2018-10-18
http://secunia.com/advisories/20910	2018-10-18
http://secunia.com/advisories/20911	2018-10-18
http://secunia.com/advisories/20913	2018-10-18
http://secunia.com/advisories/20975	2018-10-18
http://secunia.com/advisories/20995	2018-10-18
http://secunia.com/advisories/21278	2018-10-18
http://secunia.com/advisories/22129	2018-10-18
http://secunia.com/advisories/23620	2018-10-18
http://security.gentoo.org/glsa/glsa-200607-12.xml	2018-10-18
http://www.debian.org/security/2006/dsa-1104	2018-10-18
http://www.mandriva.com/security/advisories?name=MDKSA-2006:118	2018-10-18
http://www.novell.com/linux/security/advisories/2006_40_openoffice.html	2018-10-18
http://www.redhat.com/support/errata/RHSA-2006-0573.html	2018-10-18
http://www.ubuntu.com/usn/usn-313-1	2018-10-18
http://www.ubuntu.com/usn/usn-313-2	2018-10-18
http://www.vupen.com/english/advisories/2006/2607	2018-10-18
http://www.vupen.com/english/advisories/2006/2621	2018-10-18
https://access.redhat.com/security/cve/CVE-2006-3117	2006-07-03
https://bugzilla.redhat.com/show_bug.cgi?id=1618136	2006-07-03

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				1.1.0 Search vendor "Openoffice" for product "Openoffice" and version "1.1.0"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				1.1.1 Search vendor "Openoffice" for product "Openoffice" and version "1.1.1"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				1.1.2 Search vendor "Openoffice" for product "Openoffice" and version "1.1.2"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				1.1.3 Search vendor "Openoffice" for product "Openoffice" and version "1.1.3"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				1.1.4 Search vendor "Openoffice" for product "Openoffice" and version "1.1.4"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				2.0 Search vendor "Openoffice" for product "Openoffice" and version "2.0"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				2.0.0 Search vendor "Openoffice" for product "Openoffice" and version "2.0.0"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				2.0.1 Search vendor "Openoffice" for product "Openoffice" and version "2.0.1"		-		Affected
Openoffice Search vendor "Openoffice"		Openoffice Search vendor "Openoffice" for product "Openoffice"				2.0.2 Search vendor "Openoffice" for product "Openoffice" and version "2.0.2"		-		Affected
Sun Search vendor "Sun"		Staroffice Search vendor "Sun" for product "Staroffice"				6.0 Search vendor "Sun" for product "Staroffice" and version "6.0"		-		Affected
Sun Search vendor "Sun"		Staroffice Search vendor "Sun" for product "Staroffice"				7.0 Search vendor "Sun" for product "Staroffice" and version "7.0"		-		Affected
Sun Search vendor "Sun"		Staroffice Search vendor "Sun" for product "Staroffice"				8.0 Search vendor "Sun" for product "Staroffice" and version "8.0"		-		Affected