CVE-2006-6120: kde koffice

EPSS trend

Probability

4.24%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.24% on 18-09-2026

18-09-202618-10-2026

EPSS score

4.24%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

26 links

www.vupen.com/english/advisories/2006/4771VDB EntryX Refsource VUPEN
secunia.com/advisories/23220Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/23143Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/21354VDB EntryX Refsource BIDPatchVendor Advisory
websvn.kde.org/branches/…X Refsource MISCPatchVendor Advisory
securitytracker.com/id?1017318VDB EntryX Refsource SECTRACK
secunia.com/advisories/23409Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/24218Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-388-1Vendor AdvisoryX Refsource UBUNTUPatch
www.mandriva.com/security/advisories?name=MDKSA-2006:222Vendor AdvisoryX Refsource MANDRIVA

Show all 26 references

security.gentoo.org/glsa/glsa-200612-05.xmlVendor AdvisoryX Refsource GENTOO
www.redhat.com/support/errata/RHSA-2007-0010.htmlVendor AdvisoryX Refsource REDHAT
www.securityfocus.com/archive/1/453550/100/0/threadedMailing ListX Refsource BUGTRAQ
www.koffice.org/announcements/changelog-1.6.1.phpX Refsource CONFIRMPatchVendor Advisory
www.novell.com/linux/security/advisories/2006_29_sr.htmlVendor AdvisoryX Refsource SUSE
exchange.xforce.ibmcloud.com/vulnerabilities/30624VDB EntryX Refsource XF
secunia.com/advisories/23162Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.kde.org/info/security/advisory-20061204-1.txtX Refsource CONFIRM
access.redhat.com/errata/RHSA-2007:0010Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=217738REPORT
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0010.jsonAdvisory
access.redhat.com/security/cve/CVE-2006-6120REPORT
bugzilla.redhat.com/show_bug.cgi?id=218030REPORT
www.cve.org/CVERecord?id=CVE-2006-6120Advisory
nvd.nist.gov/vuln/detail/CVE-2006-6120Advisory

Related vulnerabilities

CVE-2005-2971debiankoffice+16.41%21y ago20-10-2005 04:00Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file.CVE-2005-0206asciiptex+272.99%21y ago15-02-2005 05:00The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.CVE-2005-3624conectivalinux+312.30%20y ago06-01-2006 22:00The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.CVE-2005-3625conectivalinux+313.82%20y ago06-01-2006 22:00Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."CVE-2005-3626conectivalinux+313.38%20y ago06-01-2006 22:00Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.CVE-2012-3455kdekoffice5.29%14y ago20-08-2012 19:00Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3456, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.

All vulnerabilities inkoffice

CVE-2006-6120: kde koffice

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References