VULNERABILITY INTELLIGENCE

CVE-2006-3117

CVSS score7.6 HIGH
EPSS probability4.32%
CISA KEVNot currently listed
Published2006-06-30
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:C/I:C/A:C

Description

Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."

Weakness classification

  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references