CVEvulnerability
CVE-2006-6456
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-12-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data structures that trigger memory corruption, a different vulnerability than CVE-2006-5994.
Affected configurations
• microsoft office 2000
• microsoft office 2003
• microsoft office 2004
• microsoft office xp
• microsoft word 2000
• microsoft word 2002
• microsoft word 2003
• microsoft word viewer 2003
• microsoft works 2004
• microsoft works 2005
• microsoft works 2006
References
- http://archives.neohapsis.com/archives/fulldisclosure/2006-12/0199.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/fulldisclosure/2006-12/0215.html archives.neohapsis.com
- http://blogs.technet.com/msrc/archive/2006/12/10/new-report-of-a-word-zero-day.aspx Vendor Advisory
- http://isc.sans.org/diary.php?storyid=1925 Vendor Advisory
- http://secunia.com/advisories/23205 Vendor Advisory
- http://securitytracker.com/id?1017358 securitytracker.com
- http://securitytracker.com/id?1017579 securitytracker.com
- http://vil.mcafeesecurity.com/vil/content/v_141056.htm Vendor Advisory
- http://vil.mcafeesecurity.com/vil/content/v_vul27249.htm Vendor Advisory
- http://www.kb.cert.org/vuls/id/166700 Third Party Advisory, US Government Resource
- http://www.osvdb.org/30825 www.osvdb.org
- http://www.securityfocus.com/archive/1/454069/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/454072/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/454093/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/21518 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA07-044A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/4920 www.vupen.com
- http://www.vupen.com/english/advisories/2007/0435 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30806 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A746 oval.cisecurity.org
- http://archives.neohapsis.com/archives/fulldisclosure/2006-12/0199.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/fulldisclosure/2006-12/0215.html archives.neohapsis.com
- http://blogs.technet.com/msrc/archive/2006/12/10/new-report-of-a-word-zero-day.aspx Vendor Advisory
- http://isc.sans.org/diary.php?storyid=1925 Vendor Advisory
- http://secunia.com/advisories/23205 Vendor Advisory
- http://securitytracker.com/id?1017358 securitytracker.com
- http://securitytracker.com/id?1017579 securitytracker.com
- http://vil.mcafeesecurity.com/vil/content/v_141056.htm Vendor Advisory
- http://vil.mcafeesecurity.com/vil/content/v_vul27249.htm Vendor Advisory
- http://www.kb.cert.org/vuls/id/166700 Third Party Advisory, US Government Resource
- http://www.osvdb.org/30825 www.osvdb.org
- http://www.securityfocus.com/archive/1/454069/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/454072/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/454093/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/21518 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA07-044A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/4920 www.vupen.com
- http://www.vupen.com/english/advisories/2007/0435 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30806 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A746 oval.cisecurity.org