CVE-2006-2199: openoffice

EPSS trend

Probability

3.47%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

0.00 pp

From 3.47% on 18-09-2026

18-09-202618-10-2026

EPSS score

3.47%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

28 links

www.debian.org/security/2006/dsa-1104Vendor AdvisoryX Refsource DEBIAN
www.ubuntu.com/usn/usn-313-1Vendor AdvisoryX Refsource UBUNTU
sunsolve.sun.com/search/document.do?assetkey=1-26-102475-1Vendor AdvisoryX Refsource SUNALERT
issues.rpath.com/browse/RPL-475X Refsource CONFIRM
www.openoffice.org/security/CVE-2006-2199.htmlX Refsource CONFIRM
secunia.com/advisories/20893Third Party AdvisoryX Refsource SECUNIAVendor Advisory
security.gentoo.org/glsa/glsa-200607-12.xmlVendor AdvisoryX Refsource GENTOO
www.vupen.com/english/advisories/2006/2621VDB EntryX Refsource VUPENVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11338VDB EntrySignatureX Refsource OVAL
www.securityfocus.com/archive/1/447035/100/0/threadedMailing ListX Refsource BUGTRAQ

Show all 28 references

secunia.com/advisories/20975Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/20867Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/21278Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/20910Third Party AdvisoryX Refsource SECUNIAVendor Advisory
fedoranews.org/cms/node/2343Vendor AdvisoryX Refsource FEDORA
www.mandriva.com/security/advisories?name=MDKSA-2006:118Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/20995Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/20911Third Party AdvisoryX Refsource SECUNIAVendor Advisory
securitytracker.com/id?1016414VDB EntryX Refsource SECTRACK
secunia.com/advisories/23620Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.kb.cert.org/vuls/id/243681Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.redhat.com/support/errata/RHSA-2006-0573.htmlVendor AdvisoryX Refsource REDHAT
exchange.xforce.ibmcloud.com/vulnerabilities/27569VDB EntryX Refsource XF
www.securityfocus.com/bid/18737VDB EntryX Refsource BID
www.novell.com/linux/security/advisories/2006_40_openoffice.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/20913Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.ubuntu.com/usn/usn-313-2Vendor AdvisoryX Refsource UBUNTU
www.vupen.com/english/advisories/2006/2607VDB EntryX Refsource VUPENVendor Advisory

Related vulnerabilities

CVE-2007-2834apacheopenoffice+14211.97%19y ago18-09-2007 21:00Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.CVE-2007-0245debianopenoffice.org+1396.66%19y ago12-06-2007 21:00Heap-based buffer overflow in OpenOffice.org (OOo) 2.2.1 and earlier allows remote attackers to execute arbitrary code via a RTF file with a crafted prtdata tag with a length parameter inconsistency, which causes vtable entries to be overwritten.CVE-2007-4251openofficeopenoffice1.25%19y ago08-08-2007 23:00OpenOffice.org (OOo) 2.2 does not properly handle files with multiple extensions, which allows user-assisted remote attackers to cause a denial of service.CVE-2007-4575debianhsqldb+6214.28%18y ago06-12-2007 02:00HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via crafted database documents, related to "exposing static java methods."CVE-2007-5745openofficeopenoffice4.11%18y ago17-04-2008 17:00Multiple heap-based buffer overflows in OpenOffice.org before 2.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted (1) Attribute and (2) Font Description records.CVE-2005-0941openofficeopenoffice+54.13%21y ago12-04-2005 04:00The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow.

All vulnerabilities inopenoffice staroffice

CVE-2006-2199: openoffice

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References