Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2006-5870

26
FAUCET Score

CVE-2006-5870 describes multiple integer overflows in OpenOffice.org versions 2.0.4 and earlier, and StarOffice versions 6 through 8. These vulnerabilities allow user-assisted remote attackers to execute arbitrary code by crafting malicious WMF or EMF files. The CVSS score of 9.3 indicates critical severity, with a network attack vector, medium complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
<= 2.0.4CPE matchmatch criteria
cpe:2.3:a:openoffice:openoffice:*:*:*:*:*:*:*:*
6.0CPE matchmatch criteria
cpe:2.3:a:sun:staroffice:6.0:*:*:*:*:*:*:*
7.0CPE matchmatch criteria
cpe:2.3:a:sun:staroffice:7.0:*:*:*:*:*:*:*
8.0CPE matchmatch criteria
cpe:2.3:a:sun:staroffice:8.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

9.3HIGH

AV:N/AC:M/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Exploitability Score
8.6
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
8.24%
Probability of exploitation in next 30 days
EPSS Percentile
94.3%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
This CVE's current EPSS score of 0.0824 is in the 73rd percentile among its peer group of 8,913 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (6)

denopatch availablevia llm_extracted
Fixed in: 2.1
View patch
libreofficepatch availablevia llm_extracted
Fixed in: 2.1
View patch
nessuspatch availablevia llm_extracted
Fixed in: 2.1
postgresqlpatch availablevia llm_extracted
Fixed in: 2.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: openoffice.org-0:1.1.2-35.2.0.EL3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: openoffice.org-0:1.1.5-6.6.0.EL4
View patch

Vendor Advisories (5)

redhatCVE-2006-5870Important

security flaw

Jan 3, 2007
denollm-deno-f052bed55d8e613f

WMF/EMF Processing Failures

postgresqlllm-postgresql-08ec08d0be124890

WMF/EMF Processing Failures

libreofficellm-libreoffice-ac6d112c9eb56f99

WMF/EMF Processing Failures

nessusllm-nessus-65112762291d5c5d

WMF/EMF Processing Failures

References

patches.sgi.com / support/free/security/advisories/20070101-01-P.asc
archives.neohapsis.com / archives/vulnwatch/2007-q1/0002.htmly
fedoranews.org / cms/node/2344
lists.suse.com / archive/suse-security-announce/2007-Jan/0001.html
osvdb.org / 32610
osvdb.org / 32611
secunia.com / advisories/23549
Vendor Advisory
secunia.com / advisories/23600
Vendor Advisory
secunia.com / advisories/23612
Vendor Advisory
secunia.com / advisories/23616
Vendor Advisory
secunia.com / advisories/23620
Vendor Advisory
secunia.com / advisories/23682
Vendor Advisory
secunia.com / advisories/23683
Vendor Advisory
secunia.com / advisories/23711
Vendor Advisory
secunia.com / advisories/23712
Vendor Advisory
secunia.com / advisories/23762
Vendor Advisory
secunia.com / advisories/23920
Vendor Advisory
security.gentoo.org / glsa/glsa-200701-07.xml
securitytracker.com / id
exchange.xforce.ibmcloud.com / vulnerabilities/31257
issues.rpath.com / browse/RPL-905
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8280
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9145
sunsolve.sun.com / search/document.do
debian.org / security/2007/dsa-1246
kb.cert.org / vuls/id/220288
US Government Resource
mandriva.com / security/advisories
ngssoftware.com / advisories/high-risk-vulnerabilities-in-the-staroffice-suite
openoffice.org / issues/show_bug.cgi
Patch
openoffice.org / nonav/issues/showattachment.cgi/39509/alloc.overflows.wmf.patch
redhat.com / support/errata/RHSA-2007-0001.html
PatchVendor Advisory
securityfocus.com / archive/1/455943/100/0/threaded
securityfocus.com / archive/1/455947/100/0/threaded
securityfocus.com / archive/1/455954/100/0/threaded
securityfocus.com / archive/1/455964/100/0/threaded
securityfocus.com / archive/1/456271/100/100/threaded
ubuntu.com / usn/usn-406-1
vupen.com / english/advisories/2007/0031
Vendor Advisory
vupen.com / english/advisories/2007/0059
Vendor Advisory