CVE-2006-6456
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
99.5%
Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data structures that trigger memory corruption, a different vulnerability than CVE-2006-5994.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | office | 2000 | cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:* |
| microsoft | office | 2003 | cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:* |
| microsoft | office | 2004 | cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:* |
| microsoft | office | xp | cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:* |
| microsoft | word | 2000 | cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:* |
| microsoft | word | 2002 | cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:* |
| microsoft | word | 2003 | cpe:2.3:a:microsoft:word:2003:*:*:*:*:*:*:* |
| microsoft | word_viewer | 2003 | cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:* |
| microsoft | works | 2004 | cpe:2.3:a:microsoft:works:2004:*:*:*:*:*:*:* |
| microsoft | works | 2005 | cpe:2.3:a:microsoft:works:2005:*:*:*:*:*:*:* |
References
archives.neohapsis.com/archives/fulldisclosure/2006-12/0199.html
archives.neohapsis.com/archives/fulldisclosure/2006-12/0215.html
blogs.technet.com/msrc/archive/2006/12/10/new-report-of-a-word-zero-day.aspx
isc.sans.org/diary.php?storyid=1925
secunia.com/advisories/23205
securitytracker.com/id?1017358
securitytracker.com/id?1017579
vil.mcafeesecurity.com/vil/content/v_141056.htm
vil.mcafeesecurity.com/vil/content/v_vul27249.htm
www.kb.cert.org/vuls/id/166700
www.osvdb.org/30825
www.securityfocus.com/archive/1/454069/100/0/threaded
www.securityfocus.com/archive/1/454072/100/0/threaded
www.securityfocus.com/archive/1/454093/100/0/threaded
www.securityfocus.com/bid/21518
www.us-cert.gov/cas/techalerts/TA07-044A.html
www.vupen.com/english/advisories/2006/4920
www.vupen.com/english/advisories/2007/0435
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014
exchange.xforce.ibmcloud.com/vulnerabilities/30806
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A746
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
99.5%