CVE-2006-5870: openoffice Numeric Errors
- 1 reference with an unsupported link type was hidden.
Vulnerability summary
CVE-2006-5870 is a high (CVSS 9.3) Numeric Errors vulnerability in openoffice. EPSS estimates a 8.51% chance of exploitation in the next 30 days, higher than 94.9% of scored vulnerabilities.
Timeline
- 04-01-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to execute arbitrary code via a crafted (a) WMF or (b) EMF file that triggers heap-based buffer overflows in (1) wmf/winwmf.cxx, during processing of META_ESCAPE records; and wmf/enhwmf.cxx, during processing of (2) EMR_POLYPOLYGON and (3) EMR_POLYPOLYGON16 records.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
8.51%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
+0.21 pp
From 8.30% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat5 products
- openoffice.org< 0:1.1.2-35.2.0.EL3 | < 0:1.1.5-6.6.0.EL4
- openoffice.org-debuginfo< 0:1.1.2-35.2.0.EL3 | < 0:1.1.5-6.6.0.EL4
- openoffice.org-i18n< 0:1.1.2-35.2.0.EL3 | < 0:1.1.5-6.6.0.EL4
- openoffice.org-kde< 0:1.1.5-6.6.0.EL4
- openoffice.org-libs< 0:1.1.2-35.2.0.EL3 | < 0:1.1.5-6.6.0.EL4
Debian1 product
- openoffice.org< 1.1.3-9sarge4
Openoffice1 product
- openoffice≤ 2.0.4
Sun1 product
- staroffice6.0 | 7.0 | 8.0
4 vendors · 8 products
References
46 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9145VDB EntrySignatureX Refsource OVAL
Show all 46 references
- issues.rpath.com/browse/RPL-905X Refsource CONFIRM
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8280VDB EntrySignatureX Refsource OVAL