CVE-2006-5994

4 documents4 sources
Severity
9.3CRITICAL
EPSS
59.6%
top 1.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Microsoft OfficeMicrosoft WordMicrosoft Word Viewer+1 more
Timeline
PublishedDec 6
Latest updateMay 1

Description

Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v. X for Mac, and Works 2004, 2005, and 2006 allows remote attackers to execute arbitrary code via a Word document with a malformed string that triggers memory corruption, a different vulnerability than CVE-2006-6456.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages4 packages

▶NVDmicrosoft/word2000, 2002, 2003+2
▶NVDmicrosoft/works2004, 2005, 2006+2
▶NVDmicrosoft/office4 versions+3

🔴Vulnerability Details

3
GHSA
GHSA-p3mj-fq4c-ffqj: Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v↗2022-05-01
▶
CVEList
CVE-2006-5994: Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v↗2006-12-06
▶
VulnCheck
Word Malformed String Vulnerability↗2006
▶
CVE-2006-5994 (CRITICAL CVSS 9.3) | Unspecified vulnerability in Micros | cvebase.io