CVE-2006-2199

9 documents6 sources
Severity
7.6HIGH
EPSS
10.2%
top 6.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Openoffice OpenofficeSUN Staroffice
Timeline
PublishedJun 30
Latest updateMay 1

Description

Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents.

CVSS vector

AV:N/AC:H/C:C/I:C/A:CExploitability: 4.9 | Impact: 10.0

Affected Packages2 packages

▶NVDopenoffice/openoffice9 versions+8
▶NVDsun/staroffice6.0, 7.0, 8.0+2

🔴Vulnerability Details

2
GHSA
GHSA-m4r2-74mm-gqm4: Unspecified vulnerability in Java Applets in OpenOffice↗2022-05-01
▶
CVEList
CVE-2006-2199: Unspecified vulnerability in Java Applets in OpenOffice↗2006-06-30
▶

📋Vendor Advisories

3
Ubuntu
OpenOffice.org vulnerabilities↗2006-07-19
▶
Ubuntu
OpenOffice.org vulnerabilities↗2006-07-12
▶
Red Hat
security flaw↗2006-06-29
▶

💬Community

3
Bugzilla
CVE-2006-2199 security flaw↗2018-08-16
▶
Bugzilla
CVE-2006-2198 various OOo advisories (CVE-2006-2199, CVE-2006-3117)↗2006-06-26
▶
Bugzilla
CVE-2006-2198 various OOo advisories (CVE-2006-2199, CVE-2006-3117)↗2006-06-26
▶
CVE-2006-2199 (HIGH CVSS 7.6) | Unspecified vulnerability in Java A | cvebase.io