Lucene search

K
cve[email protected]CVE-2006-6456
HistoryDec 11, 2006 - 5:28 p.m.

CVE-2006-6456

2006-12-1117:28:00
web.nvd.nist.gov
40
microsoft word
vulnerability
remote code execution
memory corruption
cve-2006-6456
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.961 High

EPSS

Percentile

99.5%

Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data structures that trigger memory corruption, a different vulnerability than CVE-2006-5994.

Affected configurations

NVD
Node
microsoftofficeMatch2000sp3
OR
microsoftofficeMatch2003sp2
OR
microsoftofficeMatch2004mac
OR
microsoftofficeMatchxpsp3
OR
microsoftwordMatch2000
OR
microsoftwordMatch2002
OR
microsoftwordMatch2003
OR
microsoftword_viewerMatch2003
OR
microsoftworksMatch2004
OR
microsoftworksMatch2005
OR
microsoftworksMatch2006

References

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.961 High

EPSS

Percentile

99.5%