Unscored severity · published Dec 11, 2006
CVE-2006-6456
Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data…
–
CVSS
32.2%
EPSS
No
On KEV
Description
Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data structures that trigger memory corruption, a different vulnerability than CVE-2006-5994.
Exploitation
Is it being used?
Exploit prediction (EPSS)32.2% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Office · Microsoft
2000; 2003; 2004; xp · source: NVD
WO
Word · Microsoft
2000; 2002; 2003 · source: NVD
WV
Word Viewer · Microsoft
2003 · source: NVD
WO
Works · Microsoft
2004; 2005; 2006 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6456
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6456
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2006-12/0199.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2006-12/0215.html
Vendor Advisory
http://blogs.technet.com/msrc/archive/2006/12/10/new-report-of-a-word-zero-day.aspx
Vendor Advisory
http://isc.sans.org/diary.php?storyid=1925
Vendor Advisory
http://secunia.com/advisories/23205
securitytracker.com
http://securitytracker.com/id?1017358
More from Office
9.8
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability