9.3

CVE-2006-5994

Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v. X for Mac, and Works 2004, 2005, and 2006 allows remote attackers to execute arbitrary code via a Word document with a malformed string that triggers memory corruption, a different vulnerability than CVE-2006-6456.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
MicrosoftOffice Version2000 Updatesp3
MicrosoftOffice Version2003 Updatesp2
MicrosoftOffice Version2004 Editionmac
MicrosoftOffice Versionxp Updatesp3
MicrosoftWord Version2000
MicrosoftWord Version2002
MicrosoftWord Version2003
MicrosoftWord Viewer Version2003
MicrosoftWorks Version2004
MicrosoftWorks Version2005
MicrosoftWorks Version2006
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 31.3% 0.981
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.us-cert.gov/cas/techalerts/TA07-044A.html
US Government Resource
http://blogs.securiteam.com/?p=759
http://blogs.technet.com/msrc/archive/2006/12/06/microsoft-security-advisory-929433-posted.aspx
http://secunia.com/advisories/23232
Vendor Advisory
http://securitytracker.com/id?1017339
http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9005698&intsrc=hm_list
http://www.kb.cert.org/vuls/id/167928
US Government Resource
http://www.microsoft.com/technet/security/advisory/929433.mspx
http://www.osvdb.org/30824
http://www.securityfocus.com/archive/1/453735/100/0/threaded
http://www.securityfocus.com/archive/1/453906/100/0/threaded
http://www.securityfocus.com/archive/1/454061/100/0/threaded
http://www.securityfocus.com/bid/21451
http://www.vupen.com/english/advisories/2006/4866
Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014
https://exchange.xforce.ibmcloud.com/vulnerabilities/30738
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A238