PT-2006-2541 · Microsoft · Office Word+4

Posidron · Published 2006-03-30 · Updated 2018-10-18 · CVE-2006-1540

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions 2000 through 2003

Description: A remote code execution issue exists in Microsoft Office, allowing attackers to execute arbitrary code via multiple attack vectors. This can be achieved by constructing a specially crafted Office file with a malformed string, which could be included in an email attachment or hosted on a malicious website. The issue can be triggered in various Office applications, including Excel, Word, and PowerPoint, potentially causing access violations. An attacker could exploit this issue by parsing the malformed string in an affected Office application, leading to remote code execution.

Recommendations: For Microsoft Office versions 2000 through 2003, update to a newer version that contains a fix for this issue to prevent remote code execution. As a temporary workaround, consider avoiding the use of malformed strings in Office files and restricting access to potentially malicious email attachments or websites.

Exploit

Fix

DoS

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2006-1540

Affected Products

Office Excel

Office

Office Visio

Office Powerpoint

Office Word

References · 23

• 🔥 https://exploit-db.com/exploits/1615 · Exploit
• 🔥 http://securitytracker.com/id?1015855 · Exploit
• 🔥 http://securityfocus.com/bid/17252 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1540 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-038 · Vendor Advisory
• http://vupen.com/english/advisories/2006/2756 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1540 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A639 · Note
• http://securityfocus.com/bid/18889 · Note
• http://securityfocus.com/archive/1/archive/1/439697/100/0/threaded · Note
• http://osvdb.org/27150 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2006/ms06-038 · Note
• http://frsirt.com/english/advisories/2006/2756 · Note
• http://milw0rm.com/exploits/1615 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27607 · Note