PT-2006-6287 · Microsoft · Multilingual Interface For Office 2003+3

Published 2006-12-31 · Updated 2018-10-17 · CVE-2006-5574

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft Office 2003 Multilingual Interface for Office 2003 Project 2003 Visio 2003

Description: The issue is related to an unspecified vulnerability in the Brazilian Portuguese Grammar Checker. This vulnerability allows user-assisted remote attackers to execute arbitrary code via crafted text that is not properly parsed.

Recommendations: For Microsoft Office 2003, consider disabling the Brazilian Portuguese Grammar Checker until a patch is available. For Multilingual Interface for Office 2003, restrict access to the grammar checking functionality to minimize the risk of exploitation. For Project 2003 and Visio 2003, avoid using the Multilingual Interface until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-5574

Affected Products

Office 2003

Multilingual Interface For Office 2003

Project 2003

Visio 2003

References · 8

• http://securityfocus.com/archive/1/457274/100/0/threaded · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-001 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-5574 · Security Note
• http://securitytracker.com/id?1017486 · Note
• http://secunia.com/advisories/23671 · Note
• http://securityfocus.com/bid/21942 · Note
• http://vupen.com/english/advisories/2007/0102 · Note
• http://osvdb.org/31251 · Note