Lucene search

K
cve[email protected]CVE-2006-1316
HistoryJul 11, 2006 - 9:05 p.m.

CVE-2006-1316

2006-07-1121:05:00
CWE-94
web.nvd.nist.gov
20
cve-2006-1316
microsoft office
vulnerability
user-assisted
arbitrary code execution
memory corruption
record lengths

7.2 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.788 High

EPSS

Percentile

98.2%

Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with malformed string that triggers memory corruption related to record lengths, aka “Microsoft Office Parsing Vulnerability,” a different vulnerability than CVE-2006-2389.

7.2 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.788 High

EPSS

Percentile

98.2%