CVE-2006-0009 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft Office
9 documents5 sources
Severity
5.1MEDIUMNVD
EPSS
41.4%
top 2.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 14
Latest updateMay 1
Description
Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint.
CVSS vector
AV:N/AC:H/C:P/I:P/A:PExploitability: 4.9 | Impact: 6.4
Affected Packages2 packages
Patches
🔴Vulnerability Details
3GHSA▶
GHSA-cg6j-ghhp-9v83: Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a↗2022-05-01
CVEList▶
CVE-2006-0009: Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a↗2006-03-14