Login Request a demo
Unscored severity · published Aug 9, 2006
CVE-2006-3649
Buffer overflow in Microsoft Visual Basic for Applications (VBA) SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, Project 2000 SR1, Project 2002 SP1,…
–
CVSS
10.2%
EPSS
No
On KEV
Description
Buffer overflow in Microsoft Visual Basic for Applications (VBA) SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, Project 2000 SR1, Project 2002 SP1, Access 2000 Runtime SP3, Visio 2002 SP2, and Works Suite 2004 through 2006, allows user-assisted attackers to execute arbitrary code via unspecified document properties that are not verified when VBA is invoked to open documents.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.2% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VB
Visual Basic · Microsoft
6.2; 6.2; 6.3; 6.4 · source: NVD
Affected product
VB
Visual Basic
Microsoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3649
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3649
secunia.com
http://secunia.com/advisories/21408
securitytracker.com
http://securitytracker.com/id?1016656
Patch
http://www.kb.cert.org/vuls/id/159484
www.securityfocus.com
http://www.securityfocus.com/bid/19414
Patch
http://www.us-cert.gov/cas/techalerts/TA06-220A.html
www.vupen.com
http://www.vupen.com/english/advisories/2006/3214
More from Visual Basic
8.8
CVE-2012-1856
Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
8.8
CVE-2012-0158
Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
–
CVE-2008-4256
The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors…
–
CVE-2008-4255
Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1…
–
CVE-2008-4254
Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allow remote…