9.3

CVE-2006-5870: openoffice Numeric Errors

CVSS: 9.3v2.0HighModified
AliasesRHSA-2007:0001DSA-1246-1
Published 04-01-2007Last modified 07-08-2024
Some data may be incomplete
  • 1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2006-5870 is a high (CVSS 9.3) Numeric Errors vulnerability in openoffice. EPSS estimates a 8.51% chance of exploitation in the next 30 days, higher than 94.9% of scored vulnerabilities.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.3/10
010
High · v2.0 (NVD)
EPSS score
8.51%
0%100%
Low · +0.21 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 04-01-2007
    PublishedVulnerability first disclosed.
  2. 07-08-2024
    Last modifiedVulnerability information updated.

Description

Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to execute arbitrary code via a crafted (a) WMF or (b) EMF file that triggers heap-based buffer overflows in (1) wmf/winwmf.cxx, during processing of META_ESCAPE records; and wmf/enhwmf.cxx, during processing of (2) EMR_POLYPOLYGON and (3) EMR_POLYPOLYGON16 records.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

8.51%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

+0.21 pp

From 8.30% on 18-09-2026

18-09-202618-10-2026
EPSS score
8.51%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Redhat5 products
  • openoffice.org< 0:1.1.2-35.2.0.EL3 | < 0:1.1.5-6.6.0.EL4
  • openoffice.org-debuginfo< 0:1.1.2-35.2.0.EL3 | < 0:1.1.5-6.6.0.EL4
  • openoffice.org-i18n< 0:1.1.2-35.2.0.EL3 | < 0:1.1.5-6.6.0.EL4
  • openoffice.org-kde< 0:1.1.5-6.6.0.EL4
  • openoffice.org-libs< 0:1.1.2-35.2.0.EL3 | < 0:1.1.5-6.6.0.EL4
Debian1 product
  • openoffice.org< 1.1.3-9sarge4
Openoffice1 product
Sun1 product

4 vendors · 8 products

References

46 links
Show all 46 references