CVE-2006-1311

3 documents3 sources
Severity
9.3CRITICAL
EPSS
70.6%
top 1.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Microsoft Learning EssentialsMicrosoft OfficeMicrosoft Windows 2003 Server
Timeline
PublishedFeb 13
Latest updateMay 1

Description

The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning Essentials for Microsoft Office 1.0, 1.1, and 1.5 allows user-assisted remote attackers to execute arbitrary code via a malformed OLE object in an RTF file, which triggers memory corruption.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDmicrosoft/office2000, 2003, xp+2
▶NVDmicrosoft/learning_essentials1.0, 1.1, 1.5+2

🔴Vulnerability Details

2
GHSA
GHSA-2mhx-hwp3-8q55: The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning E↗2022-05-01
▶
CVEList
CVE-2006-1311: The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning E↗2007-02-13
▶
CVE-2006-1311 (CRITICAL CVSS 9.3) | The RichEdit component in Microsoft | cvebase.io