Unrated severityNVD Advisory· Published Dec 31, 2006· Updated Jun 16, 2026
CVE-2006-5870
CVE-2006-5870
Description
Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to execute arbitrary code via a crafted (a) WMF or (b) EMF file that triggers heap-based buffer overflows in (1) wmf/winwmf.cxx, during processing of META_ESCAPE records; and wmf/enhwmf.cxx, during processing of (2) EMR_POLYPOLYGON and (3) EMR_POLYPOLYGON16 records.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:openoffice:openoffice:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:openoffice:openoffice:*:*:*:*:*:*:*:*range: <=2.0.4
- (no CPE)range: <=2.0.4
cpe:2.3:a:sun:staroffice:6.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:sun:staroffice:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:sun:staroffice:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:sun:staroffice:8.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
39- www.openoffice.org/issues/show_bug.cginvdPatch
- www.redhat.com/support/errata/RHSA-2007-0001.htmlnvdPatchVendor Advisory
- secunia.com/advisories/23549nvdVendor Advisory
- secunia.com/advisories/23600nvdVendor Advisory
- secunia.com/advisories/23612nvdVendor Advisory
- secunia.com/advisories/23616nvdVendor Advisory
- secunia.com/advisories/23620nvdVendor Advisory
- secunia.com/advisories/23682nvdVendor Advisory
- secunia.com/advisories/23683nvdVendor Advisory
- secunia.com/advisories/23711nvdVendor Advisory
- secunia.com/advisories/23712nvdVendor Advisory
- secunia.com/advisories/23762nvdVendor Advisory
- secunia.com/advisories/23920nvdVendor Advisory
- www.vupen.com/english/advisories/2007/0031nvdVendor Advisory
- www.vupen.com/english/advisories/2007/0059nvdVendor Advisory
- www.kb.cert.org/vuls/id/220288nvdUS Government Resource
- patches.sgi.com/support/free/security/advisories/20070101-01-P.ascnvd
- archives.neohapsis.com/archives/vulnwatch/2007-q1/0002.htmlynvd
- fedoranews.org/cms/node/2344nvd
- lists.suse.com/archive/suse-security-announce/2007-Jan/0001.htmlnvd
- osvdb.org/32610nvd
- osvdb.org/32611nvd
- security.gentoo.org/glsa/glsa-200701-07.xmlnvd
- securitytracker.com/idnvd
- sunsolve.sun.com/search/document.donvd
- www.debian.org/security/2007/dsa-1246nvd
- www.mandriva.com/security/advisoriesnvd
- www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-staroffice-suite/nvd
- www.openoffice.org/nonav/issues/showattachment.cgi/39509/alloc.overflows.wmf.patchnvd
- www.securityfocus.com/archive/1/455943/100/0/threadednvd
- www.securityfocus.com/archive/1/455947/100/0/threadednvd
- www.securityfocus.com/archive/1/455954/100/0/threadednvd
- www.securityfocus.com/archive/1/455964/100/0/threadednvd
- www.securityfocus.com/archive/1/456271/100/100/threadednvd
- www.ubuntu.com/usn/usn-406-1nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/31257nvd
- issues.rpath.com/browse/RPL-905nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8280nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9145nvd
News mentions
0No linked articles in our index yet.