CVE-2006-5870

N/A Unknown
Published: December 31, 2006 Modified: April 23, 2026
View on NVD

Description

Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to execute arbitrary code via a crafted (a) WMF or (b) EMF file that triggers heap-based buffer overflows in (1) wmf/winwmf.cxx, during processing of META_ESCAPE records; and wmf/enhwmf.cxx, during processing of (2) EMR_POLYPOLYGON and (3) EMR_POLYPOLYGON16 records.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
ftp://patches.sgi.com/support/free/security/advisories/20070101-01-P.asc
Source: cve@mitre.org
http://archives.neohapsis.com/archives/vulnwatch/2007-q1/0002.htmly
Source: cve@mitre.org
http://fedoranews.org/cms/node/2344
Source: cve@mitre.org
http://lists.suse.com/archive/suse-security-announce/2007-Jan/0001.html
Source: cve@mitre.org
http://osvdb.org/32610
Source: cve@mitre.org
http://osvdb.org/32611
Source: cve@mitre.org
http://secunia.com/advisories/23549
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/23600
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/23612
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/23616
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/23620
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/23682
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/23683
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/23711
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/23712
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/23762
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/23920
Source: cve@mitre.org
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200701-07.xml
Source: cve@mitre.org
http://securitytracker.com/id?1017466
Source: cve@mitre.org
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102735-1
Source: cve@mitre.org
http://www.debian.org/security/2007/dsa-1246
Source: cve@mitre.org
http://www.kb.cert.org/vuls/id/220288
Source: cve@mitre.org
US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2007:006
Source: cve@mitre.org
http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-staroffice-suite/
Source: cve@mitre.org
http://www.openoffice.org/issues/show_bug.cgi?id=70042
Source: cve@mitre.org
Patch
http://www.openoffice.org/nonav/issues/showattachment.cgi/39509/alloc.overflows.wmf.patch
Source: cve@mitre.org
http://www.redhat.com/support/errata/RHSA-2007-0001.html
Source: cve@mitre.org
Patch Vendor Advisory
http://www.securityfocus.com/archive/1/455943/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/455947/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/455954/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/455964/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/456271/100/100/threaded
Source: cve@mitre.org
http://www.ubuntu.com/usn/usn-406-1
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2007/0031
Source: cve@mitre.org
Vendor Advisory
http://www.vupen.com/english/advisories/2007/0059
Source: cve@mitre.org
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/31257
Source: cve@mitre.org
https://issues.rpath.com/browse/RPL-905
Source: cve@mitre.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8280
Source: cve@mitre.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9145
Source: cve@mitre.org
ftp://patches.sgi.com/support/free/security/advisories/20070101-01-P.asc
Source: af854a3a-2127-422b-91ae-364da2661108
http://archives.neohapsis.com/archives/vulnwatch/2007-q1/0002.htmly
Source: af854a3a-2127-422b-91ae-364da2661108
http://fedoranews.org/cms/node/2344
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.suse.com/archive/suse-security-announce/2007-Jan/0001.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://osvdb.org/32610
Source: af854a3a-2127-422b-91ae-364da2661108
http://osvdb.org/32611
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/23549
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/23600
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/23612
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/23616
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/23620
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/23682
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/23683
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/23711
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/23712
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/23762
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/23920
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200701-07.xml
Source: af854a3a-2127-422b-91ae-364da2661108
http://securitytracker.com/id?1017466
Source: af854a3a-2127-422b-91ae-364da2661108
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102735-1
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2007/dsa-1246
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.kb.cert.org/vuls/id/220288
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2007:006
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-staroffice-suite/
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.openoffice.org/issues/show_bug.cgi?id=70042
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://www.openoffice.org/nonav/issues/showattachment.cgi/39509/alloc.overflows.wmf.patch
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.redhat.com/support/errata/RHSA-2007-0001.html
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
http://www.securityfocus.com/archive/1/455943/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/455947/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/455954/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/455964/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/456271/100/100/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ubuntu.com/usn/usn-406-1
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2007/0031
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.vupen.com/english/advisories/2007/0059
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/31257
Source: af854a3a-2127-422b-91ae-364da2661108
https://issues.rpath.com/browse/RPL-905
Source: af854a3a-2127-422b-91ae-364da2661108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8280
Source: af854a3a-2127-422b-91ae-364da2661108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9145
Source: af854a3a-2127-422b-91ae-364da2661108

78 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
18.5%
95th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-189

Affected Vendors

sun openoffice

Related CVEs

CVE-2026-7513 8.8
CVE-2026-7512 8.8
CVE-2026-5656 7.0
CVE-2026-5405 7.8
CVE-2026-5404 4.7