Описание
Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word document, which overflows a 16-bit integer length value, aka "Memmove Code Execution," a different vulnerability than CVE-2006-3651 and CVE-2006-4693.
Ссылки
- Broken Link
- Third Party AdvisoryVDB Entry
- Broken Link
- Third Party AdvisoryVDB Entry
- Vendor Advisory
- Third Party Advisory
- Broken Link
- Third Party AdvisoryVDB Entry
- Broken Link
- Third Party AdvisoryVDB Entry
- Vendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2000:*:*:ja:*:*:*:*
cpe:2.3:a:microsoft:office:2000:*:*:ko:*:*:*:*
cpe:2.3:a:microsoft:office:2000:*:*:zh:*:*:*:*
cpe:2.3:a:microsoft:office:2000:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2000:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2001:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2001:*:*:*:*:mac_os_x:*:*
cpe:2.3:a:microsoft:office:2001:sr1:*:*:*:mac_os_x:*:*
cpe:2.3:a:microsoft:office:2003:*:*:*:student_teacher:*:*:*
cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2004:*:*:*:*:mac_os_x:*:*
cpe:2.3:a:microsoft:office:v.x:*:*:*:*:*:*:*
EPSS
Процентиль: 93%
0.10126
Средний
9.3 Critical
CVSS2
Дефекты
CWE-189
Связанные уязвимости
github
почти 4 года назад
Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word document, which overflows a 16-bit integer length value, aka "Memmove Code Execution," a different vulnerability than CVE-2006-3651 and CVE-2006-4693.
EPSS
Процентиль: 93%
0.10126
Средний
9.3 Critical
CVSS2
Дефекты
CWE-189