Description
Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | openoffice.org | 1.1.3-9sarge3 | DSA-1104 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | openoffice.org +3 | 1.1.2-34.6.0.EL4 | RHSA-2006:0573 |
| RHEL 3 | openoffice.org +2 | 1.1.2-34.2.0.EL3 | RHSA-2006:0573 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | libreoffice | 7.1.5.2-3.13 | openSUSE-SU-2024:10983-1 |
Advisories 3
- RHSA-2006:0573 Red Hat Security Advisory: openoffice.org security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1104 openoffice.org - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10983-1 libreoffice-7.1.5.2-3.13 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- DSA-1104 vendor-advisory
- USN-313-1 vendor-advisory
- 102475 vendor-advisory
- https://issues.rpath.com/browse/RPL-475
- http://www.openoffice.org/security/CVE-2006-2199.html
- 20893 third-party-advisory
- GLSA-200607-12 vendor-advisory
- ADV-2006-2621 vdb-entry
- oval:org.mitre.oval:def:11338 vdb-entry signature
- 20060926 rPSA-2006-0173-1 openoffice.org mailing-list
- 20975 third-party-advisory
- 20867 third-party-advisory
- 21278 third-party-advisory
- 20910 third-party-advisory
- FEDORA-2007-005 vendor-advisory
- MDKSA-2006:118 vendor-advisory
- 20995 third-party-advisory
- 20911 third-party-advisory
- 1016414 vdb-entry
- 23620 third-party-advisory
- VU#243681 third-party-advisory
- RHSA-2006:0573 vendor-advisory
- openoffice-applet-sandbox-bypass(27569) vdb-entry
- 18737 vdb-entry
- SUSE-SA:2006:040 vendor-advisory
- 20913 third-party-advisory
- USN-313-2 vendor-advisory
- ADV-2006-2607 vdb-entry