VulnerabilityModified
CVE-2006-5994
Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v.
HIGH 9.3EPSS 32.0%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 32.0%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v. X for Mac, and Works 2004, 2005, and 2006 allows remote attackers to execute arbitrary code via a Word document with a malformed string that triggers memory corruption, a different vulnerability than CVE-2006-6456.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 32.01% probability · 98th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/office · microsoft/word · microsoft/word viewer · microsoft/works
- Source
- secure@microsoft.com
References
- http://blogs.securiteam.com/?p=759
- http://blogs.technet.com/msrc/archive/2006/12/06/microsoft-security-advisory-929433-posted.aspx
- http://secunia.com/advisories/23232Vendor Advisory
- http://securitytracker.com/id?1017339
- http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9005698&intsrc=hm_list
- http://www.kb.cert.org/vuls/id/167928US Government Resource
- http://www.microsoft.com/technet/security/advisory/929433.mspx
- http://www.osvdb.org/30824
- http://www.securityfocus.com/archive/1/453735/100/0/threaded
- http://www.securityfocus.com/archive/1/453906/100/0/threaded
- http://www.securityfocus.com/archive/1/454061/100/0/threaded
- http://www.securityfocus.com/bid/21451
- http://www.us-cert.gov/cas/techalerts/TA07-044A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2006/4866Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30738
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A238
- http://blogs.securiteam.com/?p=759
- http://blogs.technet.com/msrc/archive/2006/12/06/microsoft-security-advisory-929433-posted.aspx
- http://secunia.com/advisories/23232Vendor Advisory
- http://securitytracker.com/id?1017339
- http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9005698&intsrc=hm_list
- http://www.kb.cert.org/vuls/id/167928US Government Resource
- http://www.microsoft.com/technet/security/advisory/929433.mspx
- http://www.osvdb.org/30824
- http://www.securityfocus.com/archive/1/453735/100/0/threaded
- http://www.securityfocus.com/archive/1/453906/100/0/threaded
- http://www.securityfocus.com/archive/1/454061/100/0/threaded
- http://www.securityfocus.com/bid/21451
- http://www.us-cert.gov/cas/techalerts/TA07-044A.htmlUS Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.