PT-2006-2327 · Microsoft · Outlook+6

Published 2006-07-11 · Updated 2018-10-12 · CVE-2006-1316

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office 2003 versions SP1 through SP2 Microsoft Office XP version SP3 Microsoft Office 2000 version SP3

Description A remote code execution issue exists in Microsoft Office, allowing user-assisted attackers to execute arbitrary code via an Office file with a malformed string that triggers memory corruption related to record lengths. This can occur when a specially crafted Office file is parsed by any of the affected Office applications. The issue may be exploited through email attachments or files hosted on malicious websites. However, viewing or previewing a malformed email message in an affected version of Outlook does not lead to exploitation.

Recommendations For Microsoft Office 2003 versions SP1 through SP2, update to a version that includes a fix for this issue. For Microsoft Office XP version SP3, update to a version that includes a fix for this issue. For Microsoft Office 2000 version SP3, update to a version that includes a fix for this issue. As a temporary workaround, consider avoiding the use of malformed strings in Office files until a patch is available. Restrict access to email attachments and files from untrusted sources to minimize the risk of exploitation.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2006-1316

Affected Products

Office 2000

Office 2003

Office Xp

Office

Office Project

Office Visio

Outlook

References · 16

• http://secunia.com/advisories/21012 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1316 · Security Note
• http://vupen.com/english/advisories/2006/2756 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-038 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1316 · Security Note
• http://osvdb.org/27148 · Note
• http://securitytracker.com/id?1016469 · Note
• http://xforce.iss.net/xforce/xfdb/27607 · Note
• http://frsirt.com/english/advisories/2006/2756 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2006/ms06-038 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:918 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27607 · Note
• http://securityfocus.com/bid/18912 · Note
• http://kb.cert.org/vuls/id/580036 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A918 · Note