CVE-2006-6628: openoffice

EPSS trend

Probability

3.64%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

0.00 pp

From 3.64% on 18-09-2026

18-09-202618-10-2026

EPSS score

3.64%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (milw0rm.com)
Maturity: unknown
referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databasedoswindowsVerified
Microsoft Word Document - Malformed Pointer (PoC)
Maturity: poc

References

8 links

www.securityfocus.com/archive/1/454722/100/0/threadedMailing ListX Refsource BUGTRAQ
www.vupen.com/english/advisories/2006/5051VDB EntryX Refsource VUPEN
www.milw0rm.com/sploits/12122006-djtest.docX Refsource MISCExploit
www.securityfocus.com/archive/1/454514/100/0/threadedMailing ListX Refsource BUGTRAQ
www.securityfocus.com/archive/1/454545/100/0/threadedMailing ListX Refsource BUGTRAQ
securityreason.com/securityalert/2043Third Party AdvisoryX Refsource SREASON
www.securityfocus.com/bid/21618VDB EntryX Refsource BIDExploit
www.securityfocus.com/archive/1/454737/100/0/threadedMailing ListX Refsource BUGTRAQ

Related vulnerabilities

CVE-2007-0245debianopenoffice.org+1396.66%19y ago12-06-2007 21:00Heap-based buffer overflow in OpenOffice.org (OOo) 2.2.1 and earlier allows remote attackers to execute arbitrary code via a RTF file with a crafted prtdata tag with a length parameter inconsistency, which causes vtable entries to be overwritten.CVE-2007-4251openofficeopenoffice1.25%19y ago08-08-2007 23:00OpenOffice.org (OOo) 2.2 does not properly handle files with multiple extensions, which allows user-assisted remote attackers to cause a denial of service.CVE-2007-4575debianhsqldb+6214.28%18y ago06-12-2007 02:00HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via crafted database documents, related to "exposing static java methods."CVE-2007-5745openofficeopenoffice4.11%18y ago17-04-2008 17:00Multiple heap-based buffer overflows in OpenOffice.org before 2.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted (1) Attribute and (2) Font Description records.CVE-2005-0941openofficeopenoffice+54.13%21y ago12-04-2005 04:00The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow.CVE-2005-4636openofficeopenoffice0.37%20y ago09-01-2006 23:00OpenOffice.org 2.0 and earlier, when hyperlinks has been disabled, does not prevent the user from clicking the WWW-browser button in the Hyperlink dialog, which makes it easier for attackers to trick the user into bypassing intended security settings.

All vulnerabilities inopenoffice

CVE-2006-6628: openoffice

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References