Lucene search

K
cveMicrosoftCVE-2006-4695
HistoryMar 11, 2008 - 11:00 p.m.

CVE-2006-4695

2008-03-1123:00:00
CWE-94
microsoft
web.nvd.nist.gov
24
microsoft office
web components
vulnerability
remote code execution
url parsing

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.1

Confidence

Low

EPSS

0.86

Percentile

98.6%

Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via a crafted URL, aka โ€œOffice Web Components URL Parsing Vulnerability.โ€

Affected configurations

Nvd
Node
microsoftoffice_web_componentsMatch2000
VendorProductVersionCPE
microsoftoffice_web_components2000cpe:2.3:a:microsoft:office_web_components:2000:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.1

Confidence

Low

EPSS

0.86

Percentile

98.6%