PT-2006-3350 · Microsoft · Office 2003+5

Published 2006-07-11 · Updated 2018-10-12 · CVE-2006-2389

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office 2003 versions SP1 through SP2 Microsoft Office XP version SP3 Microsoft Office 2000 version SP3

Description A remote code execution issue exists in Office, allowing attackers to execute arbitrary code via an Office file with a malformed property that triggers memory corruption related to record lengths. This can be exploited when a malformed property included in an Office file is parsed by any of the affected Office applications. Such a property might be included in an email attachment processed by one of the affected applications or hosted on a malicious web site. An attacker could exploit the issue by constructing a specially crafted Office file that could allow remote code execution.

Recommendations For Microsoft Office 2003 versions SP1 through SP2, update to a version that includes the fix for this issue. For Microsoft Office XP version SP3, update to a version that includes the fix for this issue. For Microsoft Office 2000 version SP3, update to a version that includes the fix for this issue. As a temporary workaround, consider avoiding the use of Office files from untrusted sources until a patch is available.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2006-2389

Affected Products

Office 2000

Office 2003

Office Xp

Office

Office Project

Office Visio

References · 17

• 🔥 https://exploit-db.com/exploits/28198 · Exploit
• http://vupen.com/english/advisories/2006/2756 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-038 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2389 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2006-2389 · Security Note
• http://secunia.com/advisories/21012 · Vendor Advisory
• http://us-cert.gov/cas/techalerts/TA06-192A.html · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2006/ms06-038 · Note
• http://xforce.iss.net/xforce/xfdb/27609 · Note
• http://securitytracker.com/id?1016469 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27609 · Note
• http://kb.cert.org/vuls/id/409316 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:279 · Note
• http://securityfocus.com/bid/18911 · Note
• http://osvdb.org/27149 · Note