PT-2006-4323 · Microsoft · Office+1

Dejun Meng · Publicado 2006-10-10 · Atualizado 2018-10-18 · CVE-2006-3434

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2000, XP, 2003, 2004 for Mac, and v.X for Mac

Description The issue allows remote user-assisted attackers to execute arbitrary code via a crafted string that triggers memory corruption when Office parses a file with a malformed string. An attacker could exploit this vulnerability, but details about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited are not provided.

Recommendations For Microsoft Office versions 2000, XP, 2003, 2004 for Mac, and v.X for Mac, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-3434

Produtos afetados

Office

Office Visio

Referências · 14

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-062 · Aviso do Fabricante
• https://docs.microsoft.com/security-updates/securitybulletins/2006/MS06-062 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3434 · Nota de Segurança
• http://kb.cert.org/vuls/id/234900 · Nota
• http://securityfocus.com/archive/1/archive/1/449179/100/0/threaded · Nota
• http://frsirt.com/english/advisories/2006/3981 · Nota
• http://securityfocus.com/bid/20382 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3434 · Nota de Segurança
• http://securitytracker.com/id?1017034 · Nota
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:389 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A389 · Nota
• http://secunia.com/advisories/22339 · Nota
• http://securityfocus.com/archive/1/449179/100/0/threaded · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/3981 · Nota