Vulnerability in N/a
CVE-2006-3650
Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac do not properly parse the length of a chart record, which allows remote user-assisted attackers to execute arbitrary code via a Word document with an embedded malformed chart r…
EPSS: 0.529 (98.0th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
References
- 20383 (vdb-entry, x_refsource_BID)
- 20061010 ZDI-06-034: Microsoft Office Word Malformed Chart Code Execution Vulnerability (mailing-list, x_refsource_BUGTRAQ)
- 29428 (x_refsource_OSVDB, vdb-entry)
- SSRT061264 (x_refsource_HP, vendor-advisory)
- ADV-2006-3981 (vdb-entry, x_refsource_VUPEN)
- www.zerodayinitiative.com/advisories/ZDI-06-034.html (x_refsource_MISC)
- MS06-062 (x_refsource_MS, vendor-advisory)
- 1017034 (vdb-entry, x_refsource_SECTRACK)
- oval:org.mitre.oval:def:222 (signature, x_refsource_OVAL, vdb-entry)
- VU#534276 (x_refsource_CERT-VN, third-party-advisory)