ZDI-06-034: Microsoft Office Word Malformed Chart Code Execution Vulnerability

ZDI-06-034: Microsoft Office Word Malformed Chart Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-034.html October 10, 2006 -- CVE ID: CVE-2006-3650 -- Affected Vendor: Microsoft -- Affected Products: Microsoft Office 2000 SP3 Microsoft Office XP SP3 Microsoft Offi...

CVE-2006-3650

CVE-2006-3650 is a remote code execution vulnerability in Microsoft Office (2000 SP3, XP SP3, 2003 SP1/SP2, and Mac variants Office 2004 for Mac and Office v.X for Mac) triggered by parsing a malformed chart record in Word documents. The flaw corrupts pointers during processing of malformed chart...

MS06-062: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (922581)

The remote host is running a version of Microsoft Office that could allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it with Microsoft Office. C Tenable Network Security, Inc. include"compat.inc"; if...