National Cyber-Alert System

Vulnerability Summary for CVE-2006-2198

Overview

OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious BASIC macro, which is executed without prompting the user.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#170113

Name: VU#170113

Hyperlink:http://www.kb.cert.org/vuls/id/170113

External Source: CONFIRM

Name: http://www.openoffice.org/security/CVE-2006-2199.html

Type: Advisory; Patch Information

Hyperlink:http://www.openoffice.org/security/CVE-2006-2199.html

External Source: SUNALERT

Name: 102490

Type: Patch Information

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102490-1

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-475

Hyperlink:https://issues.rpath.com/browse/RPL-475

External Source: XF

Name: openoffice-macro-code-execution(27564)

Hyperlink:http://xforce.iss.net/xforce/xfdb/27564

External Source: UBUNTU

Name: USN-313-2

Hyperlink:http://www.ubuntu.com/usn/usn-313-2

External Source: UBUNTU

Name: USN-313-1

Hyperlink:http://www.ubuntu.com/usn/usn-313-1

External Source: BID

Name: 18738

Hyperlink:http://www.securityfocus.com/bid/18738

External Source: BUGTRAQ

Name: 20060926 rPSA-2006-0173-1 openoffice.org

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/447035/100/0/threaded

External Source: REDHAT

Name: RHSA-2006:0573

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0573.html

External Source: SUSE

Name: SUSE-SA:2006:040

Hyperlink:http://www.novell.com/linux/security/advisories/2006_40_openoffice.html

External Source: VUPEN

Name: ADV-2006-2621

Hyperlink:http://www.frsirt.com/english/advisories/2006/2621

External Source: VUPEN

Name: ADV-2006-2607

Hyperlink:http://www.frsirt.com/english/advisories/2006/2607

External Source: DEBIAN

Name: DSA-1104

Hyperlink:http://www.debian.org/security/2006/dsa-1104

External Source: SECTRACK

Name: 1016414

Hyperlink:http://securitytracker.com/id?1016414

External Source: GENTOO

Name: GLSA-200607-12

Hyperlink:http://security.gentoo.org/glsa/glsa-200607-12.xml

External Source: SECUNIA

Name: 23620

Hyperlink:http://secunia.com/advisories/23620

External Source: SECUNIA

Name: 22129

Hyperlink:http://secunia.com/advisories/22129

External Source: SECUNIA

Name: 21278

Hyperlink:http://secunia.com/advisories/21278

External Source: SECUNIA

Name: 20995

Hyperlink:http://secunia.com/advisories/20995

External Source: SECUNIA

Name: 20975

Hyperlink:http://secunia.com/advisories/20975

External Source: SECUNIA

Name: 20913

Hyperlink:http://secunia.com/advisories/20913

External Source: SECUNIA

Name: 20911

Hyperlink:http://secunia.com/advisories/20911

External Source: SECUNIA

Name: 20910

Hyperlink:http://secunia.com/advisories/20910

External Source: SECUNIA

Name: 20893

Hyperlink:http://secunia.com/advisories/20893

External Source: SECUNIA

Name: 20867

Hyperlink:http://secunia.com/advisories/20867

External Source: MANDRIVA

Name: MDKSA-2006:118

Hyperlink:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:118

External Source: FEDORA

Name: FEDORA-2007-005

Hyperlink:http://fedoranews.org/cms/node/2343

External Source: MANDRIVA

Name: MDKSA-2006:118

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:118