rewindex

RewindexCVEs

CVE-2006-2492: Microsoft Word Malformed Object Pointer Vulnerability

High · CVSS 8.8 (CVSS 3.1)KEV known exploitedEPSS 48.1%, 99th percentilePublished Updated Assigner: certcc

In CISA’s Known Exploited Vulnerabilities catalog: Microsoft Word Malformed Object Pointer Vulnerability.

Added , federal remediation due . Known ransomware use: Unknown.

Required action: Apply updates per vendor instructions.

Description

Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack.

Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Status incidents that name it

No tracked status incident names this CVE.

Affected vendors and products

Microsoft: Word

References

All CVEsMarkdownJSON