Vulnerability in N/a
CVE-2006-6561
Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted DOC file that triggers memory corruption, as demonstrated via the 12122006-djtest.do…
EPSS: 0.714 (98.7th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 21589 (vdb-entry, x_refsource_BID)
- blogs.technet.com/msrc/archive/2006/12/15/update-on-current-word-vulnerability-… (x_refsource_CONFIRM)
- 1017390 (vdb-entry, x_refsource_SECTRACK)
- www.infoworld.com/article/06/12/13/HNthirdword_1.html (x_refsource_MISC)
- www.milw0rm.com/sploits/12122006-djtest.doc (x_refsource_MISC)
- 20061212 Re: Re: The newest Word flaw is due to malformed data structure handling (mailing-list, x_refsource_BUGTRAQ)
- research.eeye.com/html/alerts/zeroday/20061212.html (x_refsource_MISC)
- VU#996892 (x_refsource_CERT-VN, third-party-advisory)
- ADV-2006-4997 (vdb-entry, x_refsource_VUPEN)
- blogs.securiteam.com/ (x_refsource_MISC)
Frequently asked questions
- What is CVE-2006-6561?
- CVE-2006-6561 is a vulnerability in N/a. Published 2006-12-14.
- Is CVE-2006-6561 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.