ID |
CVE-2006-6628
|
Summary |
Integer overflow in OpenOffice.org (OOo) 2.1 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted DOC file, as demonstrated by the 12122006-djtest.doc file, a variant of CVE-2006-6561 in a separate codebase. |
References |
|
Vulnerable Configurations |
|
CVSS |
Base: | 4.3 (as of 17-10-2018 - 21:49) |
Impact: | |
Exploitability: | |
|
CWE |
NVD-CWE-Other |
CAPEC |
|
Access |
Vector | Complexity | Authentication |
NETWORK |
MEDIUM |
NONE |
|
Impact |
Confidentiality | Integrity | Availability |
NONE |
NONE |
PARTIAL |
|
cvss-vector
via4
|
AV:N/AC:M/Au:N/C:N/I:N/A:P
|
refmap
via4
|
bid | 21618 | bugtraq | - 20061215 Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
- 20061215 Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
- 20061217 Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
- 20061218 Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
| exploit-db | 2922 | misc | http://www.milw0rm.com/sploits/12122006-djtest.doc | sreason | 2043 | vupen | ADV-2006-5051 |
|
statements
via4
|
contributor | Joshua Bressers | lastmodified | 2007-01-15 | organization | Red Hat | statement | Red Hat does not consider this flaw a security issue. This flaw will only crash OpenOffice.org and presents no possibility for arbitrary code execution. |
|
Last major update |
17-10-2018 - 21:49 |
Published |
18-12-2006 - 11:28 |
Last modified |
17-10-2018 - 21:49 |