PT-2006-4323 · Microsoft · Office+1

Dejun Meng · Published 2006-10-10 · Updated 2018-10-18 · CVE-2006-3434

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2000, XP, 2003, 2004 for Mac, and v.X for Mac

Description The issue allows remote user-assisted attackers to execute arbitrary code via a crafted string that triggers memory corruption when Office parses a file with a malformed string. An attacker could exploit this vulnerability, but details about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited are not provided.

Recommendations For Microsoft Office versions 2000, XP, 2003, 2004 for Mac, and v.X for Mac, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-3434

Affected Products

Office

Office Visio

References · 14

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-062 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3434 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2006-3434 · Security Note
• http://securityfocus.com/archive/1/449179/100/0/threaded · Vendor Advisory
• https://docs.microsoft.com/security-updates/securitybulletins/2006/MS06-062 · Note
• http://kb.cert.org/vuls/id/234900 · Note
• http://securityfocus.com/archive/1/archive/1/449179/100/0/threaded · Note
• http://frsirt.com/english/advisories/2006/3981 · Note
• http://securityfocus.com/bid/20382 · Note
• http://securitytracker.com/id?1017034 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:389 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A389 · Note
• http://secunia.com/advisories/22339 · Note
• http://vupen.com/english/advisories/2006/3981 · Note