CVE-2006-3434 — Code Injection in Microsoft Office

CWE-94 — Code Injection6 documents2 sources
Severity
9.3CRITICALNVD
EPSS
25.4%
top 3.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Microsoft OfficeMicrosoft ProjectMicrosoft Visio
Timeline
PublishedOct 10
Latest updateMay 1

Description

Unspecified vulnerability in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string that triggers memory corruption.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDmicrosoft/office6 versions+5
▶NVDmicrosoft/visio2002
▶NVDmicrosoft/project2000, 2002+1

🔴Vulnerability Details

3
GHSA
GHSA-rj6p-9h7w-6cg5: Microsoft Office 2000, XP, 2003, 2004 for Mac, and v↗2022-05-01
▶
GHSA
GHSA-2fjm-52x8-rrh8: Unspecified vulnerability in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v↗2022-05-01
▶
GHSA
GHSA-9v54-c9j8-fw7m: Unspecified vulnerability in mso↗2022-05-01
▶
CVE-2006-3434 — Code Injection in Microsoft Office | cvebase