CVE-2006-2198: Openoffice

High severity, CVSS 7.6. EPSS: 3.5% chance of exploitation in the next 30 days.

OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious BASIC macro, which is executed without prompting the user.

Affected products

• Openoffice Openoffice: version 1.1.0 only; version 1.1.1 only; version 1.1.1a only; version 1.1.1b only; version 1.1.2 only; version 1.1.3 only; …
• Sun Staroffice: version 7.0 only; version 8.0 only

Published 2006-06-30. Last modified 2026-09-23.