Every CVE Search/ Get API key

CVE-2006-3117

Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before...

7.6 High

Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."

Exploit likelihood

4.32%Down 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.6

Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."

Record
CVE-2006-3117
CVSS 2.0
7.6 HighAV:N/AC:H/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."

Record
CVE-2006-3117
Updated
2026-11-02
EUVDEUVD-2006-3114 No score

Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."

Record
EUVD-2006-3114
Updated
2026-11-03
GitHub AdvisoriesGHSA-9hrj-83rp-h2c6 No score

Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before...

Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."

Record
GHSA-9hrj-83rp-h2c6
Weakness
CWE-119
Updated
2026-11-02
OSVopenSUSE-SU-2024:10983-1 No score

libreoffice-7.1.5.2-3.13 on GA media

These are all security issues fixed in the libreoffice-7.1.5.2-3.13 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10983-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openoffice.org
Debian:3.1
From an advisory covering 3 CVEs
 before 1.1.3-9sarge3, plus listed versions
1.1.3-91.1.3-9sarge11.1.3-9sarge2
1.1.3-9sarge3
openoffice.org
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
 before 0:1.1.2-34.2.0.EL3
0:1.1.2-34.2.0.EL3
openoffice.org-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
 before 0:1.1.2-34.2.0.EL3
0:1.1.2-34.2.0.EL3
openoffice.org-i18n
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
 before 0:1.1.2-34.2.0.EL3
0:1.1.2-34.2.0.EL3
openoffice.org-libs
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
 before 0:1.1.2-34.2.0.EL3
0:1.1.2-34.2.0.EL3
openoffice.org
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
 before 0:1.1.2-34.2.0.EL3
0:1.1.2-34.2.0.EL3
openoffice.org-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
 before 0:1.1.2-34.2.0.EL3
0:1.1.2-34.2.0.EL3
openoffice.org-i18n
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
 before 0:1.1.2-34.2.0.EL3
0:1.1.2-34.2.0.EL3
openoffice.org-libs
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
 before 0:1.1.2-34.2.0.EL3
0:1.1.2-34.2.0.EL3
openoffice.org
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
 before 0:1.1.2-34.2.0.EL3
0:1.1.2-34.2.0.EL3
Show 28 moreShow less
Affected packages
PackageAffectedFixed
openoffice.org-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
 before 0:1.1.2-34.2.0.EL3
0:1.1.2-34.2.0.EL3
openoffice.org-i18n
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
 before 0:1.1.2-34.2.0.EL3
0:1.1.2-34.2.0.EL3
openoffice.org-libs
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
 before 0:1.1.2-34.2.0.EL3
0:1.1.2-34.2.0.EL3
openoffice.org
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
 before 0:1.1.2-34.2.0.EL3
0:1.1.2-34.2.0.EL3
openoffice.org-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
 before 0:1.1.2-34.2.0.EL3
0:1.1.2-34.2.0.EL3
openoffice.org-i18n
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
 before 0:1.1.2-34.2.0.EL3
0:1.1.2-34.2.0.EL3
openoffice.org-libs
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
 before 0:1.1.2-34.2.0.EL3
0:1.1.2-34.2.0.EL3
openoffice.org
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
 before 0:1.1.2-34.6.0.EL4
0:1.1.2-34.6.0.EL4
openoffice.org-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
 before 0:1.1.2-34.6.0.EL4
0:1.1.2-34.6.0.EL4
openoffice.org-i18n
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
 before 0:1.1.2-34.6.0.EL4
0:1.1.2-34.6.0.EL4
openoffice.org-kde
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
 before 0:1.1.2-34.6.0.EL4
0:1.1.2-34.6.0.EL4
openoffice.org-libs
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
 before 0:1.1.2-34.6.0.EL4
0:1.1.2-34.6.0.EL4
openoffice.org
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
 before 0:1.1.2-34.6.0.EL4
0:1.1.2-34.6.0.EL4
openoffice.org-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
 before 0:1.1.2-34.6.0.EL4
0:1.1.2-34.6.0.EL4
openoffice.org-i18n
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
 before 0:1.1.2-34.6.0.EL4
0:1.1.2-34.6.0.EL4
openoffice.org-kde
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
 before 0:1.1.2-34.6.0.EL4
0:1.1.2-34.6.0.EL4
openoffice.org-libs
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
 before 0:1.1.2-34.6.0.EL4
0:1.1.2-34.6.0.EL4
openoffice.org
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
 before 0:1.1.2-34.6.0.EL4
0:1.1.2-34.6.0.EL4
openoffice.org-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
 before 0:1.1.2-34.6.0.EL4
0:1.1.2-34.6.0.EL4
openoffice.org-i18n
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
 before 0:1.1.2-34.6.0.EL4
0:1.1.2-34.6.0.EL4
openoffice.org-kde
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
 before 0:1.1.2-34.6.0.EL4
0:1.1.2-34.6.0.EL4
openoffice.org-libs
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
 before 0:1.1.2-34.6.0.EL4
0:1.1.2-34.6.0.EL4
openoffice.org
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
 before 0:1.1.2-34.6.0.EL4
0:1.1.2-34.6.0.EL4
openoffice.org-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
 before 0:1.1.2-34.6.0.EL4
0:1.1.2-34.6.0.EL4
openoffice.org-i18n
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
 before 0:1.1.2-34.6.0.EL4
0:1.1.2-34.6.0.EL4
openoffice.org-kde
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
 before 0:1.1.2-34.6.0.EL4
0:1.1.2-34.6.0.EL4
openoffice.org-libs
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
 before 0:1.1.2-34.6.0.EL4
0:1.1.2-34.6.0.EL4
libreoffice
openSUSE:Tumbleweed
From an advisory covering 24 CVEs
 before 7.1.5.2-3.13
7.1.5.2-3.13

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-3117 is a high vulnerability (CVSS 7.6) in Openoffice, published June 30, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.32%, the 91st percentile. No source names a fixed version.

References

Show 65 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open