National Cyber Awareness System

Vulnerability Summary for CVE-2006-3117

Overview

Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: http://www.openoffice.org/security/CVE-2006-3117.html

Type: Patch Information

Hyperlink:http://www.openoffice.org/security/CVE-2006-3117.html

External Source: MISC

Name: http://www.ngssoftware.com/advisories/openoffice.txt

Type: Patch Information

Hyperlink:http://www.ngssoftware.com/advisories/openoffice.txt

External Source: SUNALERT

Name: 102501

Type: Patch Information

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102501-1

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-475

Hyperlink:https://issues.rpath.com/browse/RPL-475

External Source: XF

Name: openoffice-xml-document-bo(27571)

Hyperlink:http://xforce.iss.net/xforce/xfdb/27571

External Source: VUPEN

Name: ADV-2006-2621

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2006/2621

External Source: VUPEN

Name: ADV-2006-2607

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2006/2607

External Source: UBUNTU

Name: USN-313-2

Hyperlink:http://www.ubuntu.com/usn/usn-313-2

External Source: UBUNTU

Name: USN-313-1

Hyperlink:http://www.ubuntu.com/usn/usn-313-1

External Source: BID

Name: 18739

Hyperlink:http://www.securityfocus.com/bid/18739

External Source: BUGTRAQ

Name: 20060926 rPSA-2006-0173-1 openoffice.org

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/447035/100/0/threaded

External Source: REDHAT

Name: RHSA-2006:0573

Type: Advisory

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0573.html

External Source: SUSE

Name: SUSE-SA:2006:040

Hyperlink:http://www.novell.com/linux/security/advisories/2006_40_openoffice.html

External Source: MANDRIVA

Name: MDKSA-2006:118

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:118

External Source: DEBIAN

Name: DSA-1104

Hyperlink:http://www.debian.org/security/2006/dsa-1104

External Source: SECTRACK

Name: 1016414

Hyperlink:http://securitytracker.com/id?1016414

External Source: GENTOO

Name: GLSA-200607-12

Hyperlink:http://security.gentoo.org/glsa/glsa-200607-12.xml

External Source: SECUNIA

Name: 23620

Type: Advisory

Hyperlink:http://secunia.com/advisories/23620

External Source: SECUNIA

Name: 22129

Type: Advisory

Hyperlink:http://secunia.com/advisories/22129

External Source: SECUNIA

Name: 21278

Type: Advisory

Hyperlink:http://secunia.com/advisories/21278

External Source: SECUNIA

Name: 20995

Type: Advisory

Hyperlink:http://secunia.com/advisories/20995

External Source: SECUNIA

Name: 20975

Type: Advisory

Hyperlink:http://secunia.com/advisories/20975

External Source: SECUNIA

Name: 20913

Type: Advisory

Hyperlink:http://secunia.com/advisories/20913

External Source: SECUNIA

Name: 20911

Type: Advisory

Hyperlink:http://secunia.com/advisories/20911

External Source: SECUNIA

Name: 20910

Type: Advisory

Hyperlink:http://secunia.com/advisories/20910

External Source: SECUNIA

Name: 20893

Type: Advisory

Hyperlink:http://secunia.com/advisories/20893

External Source: SECUNIA

Name: 20867

Type: Advisory

Hyperlink:http://secunia.com/advisories/20867

External Source: OVAL

Name: oval:org.mitre.oval:def:9704

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9704

External Source: FEDORA

Name: FEDORA-2007-005

Hyperlink:http://fedoranews.org/cms/node/2343

References to Check Content

Identifier:oval:org.mitre.oval:def:9704

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:9704