VDB
CVE-2006-6120
CVE-2006-6120
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Integer overflow in the KPresenter import filter for Microsoft PowerPoint files (filters/olefilters/lib/klaola.cc) in KOffice before 1.6.1 allows user-assisted remote attackers to execute arbitrary code via a crafted PPT file, which results in a heap-based buffer overflow.
EPSS 4.24% · 90.8th percentile
Risk Scores
CVSS 2.0
6.800000190734863
EPSS Score
4.24%
90.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| kde | koffice | 1.6.1 |
Timeline
- Dec 3, 2006 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 7, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Sep 10, 2023 EPSS Score
References
- ADV-2006-4771 vdb
- 23143 third-party-advisory
- http://websvn.kde.org/branches/koffice/1.6/koffice/filters/olefilters/lib/klaola.cc?rev=607037&r1=566347&r2=607037 url
- 23409 third-party-advisory
- 24218 third-party-advisory
- GLSA-200612-05 vendor-advisory
- 20061205 [KOffice security advisory] KOffice OLEfilter integer overflow mailing-list
- koffice-readbigblockdepot-overflow(30624) vdb
- 23162 third-party-advisory
- 23220 third-party-advisory
- 21354 vdb
- 1017318 vdb
- USN-388-1 vendor-advisory
- MDKSA-2006:222 vendor-advisory
- RHSA-2007:0010 vendor-advisory
- http://www.koffice.org/announcements/changelog-1.6.1.php url
- SUSE-SR:2006:029 vendor-advisory
- http://www.kde.org/info/security/advisory-20061204-1.txt url
- https://nvd.nist.gov/vuln/detail/CVE-2006-6120 advisory