NVD脆弱性詳細

CVE-2006-5870

概要	Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to execute arbitrary code via a crafted (a) WMF or (b) EMF file that triggers heap-based buffer overflows in (1) wmf/winwmf.cxx, during processing of META_ESCAPE records; and wmf/enhwmf.cxx, during processing of (2) EMR_POLYPOLYGON and (3) EMR_POLYPOLYGON16 records.
公表日	2006年12月31日14:00
登録日	2021年1月29日15:49
最終更新日	2018年10月18日6:45

CVSS2.0 : HIGH
スコア	9.3
ベクター	AV:N/AC:M/Au:N/C:C/I:C/A:C
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高
全ての特権を取得	はい
ユーザー権限を取得	いいえ
その他の権限を取得	いいえ
ユーザー操作が必要	はい

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:a:openoffice:openoffice::::::::		2.0.4
cpe:2.3:a:sun:staroffice:6.0:::::::*
cpe:2.3:a:sun:staroffice:7.0:::::::*
cpe:2.3:a:sun:staroffice:8.0:::::::*

関連情報、対策とツール

No	URL	refsource	タグ
1	ftp://patches.sgi.com/support/free/security/advisories/20070101-01-P.asc	SGI
2	http://archives.neohapsis.com/archives/vulnwatch/2007-q1/0002.htmly	VULNWATCH
3	http://fedoranews.org/cms/node/2344	FEDORA
4	http://lists.suse.com/archive/suse-security-announce/2007-Jan/0001.html	SUSE
5	http://osvdb.org/32610	OSVDB
6	http://osvdb.org/32611	OSVDB
7	http://secunia.com/advisories/23549	SECUNIA	Vendor Advisory
8	http://secunia.com/advisories/23600	SECUNIA	Vendor Advisory
9	http://secunia.com/advisories/23612	SECUNIA	Vendor Advisory
10	http://secunia.com/advisories/23616	SECUNIA	Vendor Advisory
11	http://secunia.com/advisories/23620	SECUNIA	Vendor Advisory
12	http://secunia.com/advisories/23682	SECUNIA	Vendor Advisory
13	http://secunia.com/advisories/23683	SECUNIA	Vendor Advisory
14	http://secunia.com/advisories/23711	SECUNIA	Vendor Advisory
15	http://secunia.com/advisories/23712	SECUNIA	Vendor Advisory
16	http://secunia.com/advisories/23762	SECUNIA	Vendor Advisory
17	http://secunia.com/advisories/23920	SECUNIA	Vendor Advisory
18	http://security.gentoo.org/glsa/glsa-200701-07.xml	GENTOO
19	http://securitytracker.com/id?1017466	SECTRACK
20	http://sunsolve.sun.com/search/document.do?assetkey=1-26-102735-1	SUNALERT
21	http://www.debian.org/security/2007/dsa-1246	DEBIAN
22	http://www.kb.cert.org/vuls/id/220288	CERT-VN	US Government Resource
23	http://www.mandriva.com/security/advisories?name=MDKSA-2007:006	MANDRIVA
24	http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-staroffice-suite/	MISC
25	http://www.openoffice.org/issues/show_bug.cgi?id=70042	CONFIRM	Patch
26	http://www.openoffice.org/nonav/issues/showattachment.cgi/39509/alloc.overflows.wmf.patch	CONFIRM
27	http://www.redhat.com/support/errata/RHSA-2007-0001.html	REDHAT	Patch Vendor Advisory
28	http://www.securityfocus.com/archive/1/455943/100/0/threaded	BUGTRAQ
29	http://www.securityfocus.com/archive/1/455947/100/0/threaded	BUGTRAQ
30	http://www.securityfocus.com/archive/1/455954/100/0/threaded	BUGTRAQ
31	http://www.securityfocus.com/archive/1/455964/100/0/threaded	BUGTRAQ
32	http://www.securityfocus.com/archive/1/456271/100/100/threaded	BUGTRAQ
33	http://www.ubuntu.com/usn/usn-406-1	UBUNTU
34	http://www.vupen.com/english/advisories/2007/0031	VUPEN	Vendor Advisory
35	http://www.vupen.com/english/advisories/2007/0059	VUPEN	Vendor Advisory
36	https://exchange.xforce.ibmcloud.com/vulnerabilities/31257	XF
37	https://issues.rpath.com/browse/RPL-905	CONFIRM
38	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8280	OVAL
39	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9145	OVAL

共通脆弱性一覧

No	CWE	名前	URL
1	CWE-189	数値処理の問題	https://cwe.mitre.org/data/definitions/189.html