CVE-2006-3864

Опубликовано: 10 окт. 2006

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Unspecified vulnerability in mso.dll in Microsoft Office 2000, XP, and 2003, and Microsoft PowerPoint 2000, XP, and 2003, allows remote user-assisted attackers to execute arbitrary code via a malformed record in a (1) .DOC, (2) .PPT, or (3) .XLS file that triggers memory corruption, related to an "array boundary condition" (possibly an array index overflow), a different vulnerability than CVE-2006-3434, CVE-2006-3650, and CVE-2006-3868.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*

cpe:2.3:a:microsoft:office:v.x:*:mac:*:*:*:*:*

cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:project:2000:sr1:*:*:*:*:*:*

cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.45707

Средний

9.3 Critical

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-9v54-c9j8-fw7m

github

почти 4 года назад