CVE-2006-3117
Fixed in a distro release EPSS 4%
Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."
Products: openoffice, sun staroffice
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.1 | openoffice.org | 1.1.3-9sarge3 |
| Red Hat Enterprise Linux 3 | openoffice.org | 0:1.1.2-34.2.0.EL3 |
| Red Hat Enterprise Linux 3 | openoffice.org-debuginfo | 0:1.1.2-34.2.0.EL3 |
| Red Hat Enterprise Linux 3 | openoffice.org-i18n | 0:1.1.2-34.2.0.EL3 |
| Red Hat Enterprise Linux 3 | openoffice.org-libs | 0:1.1.2-34.2.0.EL3 |
| Red Hat Enterprise Linux 4 | openoffice.org | 0:1.1.2-34.6.0.EL4 |
| Red Hat Enterprise Linux 4 | openoffice.org-debuginfo | 0:1.1.2-34.6.0.EL4 |
| Red Hat Enterprise Linux 4 | openoffice.org-i18n | 0:1.1.2-34.6.0.EL4 |
| Red Hat Enterprise Linux 4 | openoffice.org-kde | 0:1.1.2-34.6.0.EL4 |
| Red Hat Enterprise Linux 4 | openoffice.org-libs | 0:1.1.2-34.6.0.EL4 |
| openSUSE Tumbleweed | libreoffice | 7.1.5.2-3.13 |