What’s Vulnerable › Vulnerabilities

CVE-2006-2198

• Severity: high (CVSS 7.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-06-30 · updated 2026-09-23
• Weakness: CWE-264

Description

OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious BASIC macro, which is executed without prompting the user.

Affected products

• Openoffice: 1.1.0, 1.1.1, 1.1.1a, 1.1.1b, 1.1.2, 1.1.3 (+16)
• Sun Staroffice: 7.0, 8.0

References

• http://fedoranews.org/cms/node/2343
• http://secunia.com/advisories/20867
• http://secunia.com/advisories/20893
• http://secunia.com/advisories/20910
• http://secunia.com/advisories/20911
• http://secunia.com/advisories/20913
• http://secunia.com/advisories/20975
• http://secunia.com/advisories/20995
• http://secunia.com/advisories/21278
• http://secunia.com/advisories/22129
• http://secunia.com/advisories/23620
• http://security.gentoo.org/glsa/glsa-200607-12.xml

Get alerted when CVE-2006-2198 or the next vulnerability affects your stack