CVE-2006-3117

Severity: high (CVSS 7.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-06-30 · updated 2026-06-16
Weakness: CWE-119

Description

Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."

Affected products

Openoffice: 1.1.0, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 2.0 (+3)
Sun Staroffice: 6.0, 7.0, 8.0

References

http://fedoranews.org/cms/node/2343
http://secunia.com/advisories/20867
http://secunia.com/advisories/20893
http://secunia.com/advisories/20910
http://secunia.com/advisories/20911
http://secunia.com/advisories/20913
http://secunia.com/advisories/20975
http://secunia.com/advisories/20995
http://secunia.com/advisories/21278
http://secunia.com/advisories/22129
http://secunia.com/advisories/23620
http://security.gentoo.org/glsa/glsa-200607-12.xml

Get alerted when CVE-2006-3117 or the next vulnerability affects your stack