Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2006-2492
HistoryMay 20, 2006 - 12:02 a.m.

CVE-2006-2492

2006-05-2000:02:00
CWE-120
[email protected]
web.nvd.nist.gov
842
In Wild
2
microsoft word
buffer overflow
arbitrary code execution
cve-2006-2492
office 2000
office xp
office 2003
microsoft works suites

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

Low

0.851 High

EPSS

Percentile

98.6%

JSON

Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack.

Affected configurations

NVD
Node
microsoftofficeMatch2000sp3
OR
microsoftofficeMatch2003sp1
OR
microsoftofficeMatch2003sp2
OR
microsoftofficeMatchxpsp3
OR
microsoftworks_suiteRange2000–2006

References

Social References

More

Related

canvas 1
checkpoint_advisories 3
nvd 1
attackerkb 1
cisa_kev 1
cert 1
cvelist 1
securityvulns 1
prion 1
nessus 1
canvas
canvas
Immunity Canvas: SMARTAG_WORD
2006-05-20 00:02:00
checkpoint_advisories
checkpoint_advisories
Update Protection against MS-Word Zero-Day Attack (919637)
2006-05-24 00:00:00
Microsoft Word Smart Tags Code Execution (MS06-027) - Ver2 (CVE-2006-2492)
2014-04-16 00:00:00
Microsoft Word Smart Tags Code Execution (MS06-027; CVE-2006-2492)
2010-02-04 00:00:00
nvd
nvd
CVE-2006-2492
2006-05-20 00:02:00
attackerkb
attackerkb
CVE-2006-2492
2006-05-20 00:00:00
cisa_kev
cisa_kev
Microsoft Word Malformed Object Pointer Vulnerability
2022-06-08 00:00:00
cert
cert
Microsoft Word object pointer memory corruption vulnerability
2006-05-19 00:00:00
cvelist
cvelist
CVE-2006-2492
2006-05-20 00:00:00
securityvulns
securityvulns
Microsoft Security Bulletin MS06-027 Vulnerability in Microsoft Word Could Allow Remote Code Execution (917336)
2006-06-13 00:00:00
prion
prion
Buffer overflow
2006-05-20 00:02:00
nessus
nessus
MS06-027: Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (917336)
2006-06-13 00:00:00

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

Low

0.851 High

EPSS

Percentile

98.6%

JSON
Related for CVE-2006-2492
canvas1checkpoint_advisories3nvd1attackerkb1cisa_kev1cert1cvelist1securityvulns1prion1nessus1