Veille CVE
CVE-2006-2492
8.8 Élevée Exploitée activementCatalogue CISA KEV — Microsoft Word Malformed Object Pointer Vulnerability
Ajoutée le 08/06/2022 · Échéance de correction (agences US) : 22/06/2022
Action requise : Apply updates per vendor instructions.
Description
Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 8.8 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 3.1 | 8.8 Élevée | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 2.0 | 7.6 Élevée | nvd@nist.gov (NVD) | AV:N/AC:H/Au:N/C:C/I:C/A:C |
Faiblesses (CWE)
Références
- http://blogs.technet.com/msrc/archive/2006/05/19/429353.aspx Broken Link
- http://isc.sans.org/diary.php?storyid=1345 Exploit
- http://isc.sans.org/diary.php?storyid=1346 Exploit
- http://secunia.com/advisories/20153 Broken LinkPatchVendor Advisory
- http://securitytracker.com/id?1016130 Broken LinkThird Party AdvisoryVDB Entry
- http://www.kb.cert.org/vuls/id/446012 Third Party AdvisoryUS Government Resource
- http://www.microsoft.com/technet/security/advisory/919637.mspx Broken LinkPatchVendor Advisory
- http://www.osvdb.org/25635 Broken Link
- http://www.securityfocus.com/bid/18037 Broken LinkPatchThird Party AdvisoryVDB Entry
- http://www.us-cert.gov/cas/techalerts/TA06-139A.html Broken LinkThird Party AdvisoryUS Government Resource
- http://www.us-cert.gov/cas/techalerts/TA06-164A.html Broken LinkThird Party AdvisoryUS Government Resource
- http://www.vupen.com/english/advisories/2006/1872 Broken Link
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-027 PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26556 Third Party AdvisoryVDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1418 Broken Link
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1738 Broken Link
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2068 Broken Link
- http://blogs.technet.com/msrc/archive/2006/05/19/429353.aspx Broken Link
- http://isc.sans.org/diary.php?storyid=1345 Exploit
- http://isc.sans.org/diary.php?storyid=1346 Exploit
- http://secunia.com/advisories/20153 Broken LinkPatchVendor Advisory
- http://securitytracker.com/id?1016130 Broken LinkThird Party AdvisoryVDB Entry
- http://www.kb.cert.org/vuls/id/446012 Third Party AdvisoryUS Government Resource
- http://www.microsoft.com/technet/security/advisory/919637.mspx Broken LinkPatchVendor Advisory
- http://www.osvdb.org/25635 Broken Link
- http://www.securityfocus.com/bid/18037 Broken LinkPatchThird Party AdvisoryVDB Entry
- http://www.us-cert.gov/cas/techalerts/TA06-139A.html Broken LinkThird Party AdvisoryUS Government Resource
- http://www.us-cert.gov/cas/techalerts/TA06-164A.html Broken LinkThird Party AdvisoryUS Government Resource
- http://www.vupen.com/english/advisories/2006/1872 Broken Link
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-027 PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26556 Third Party AdvisoryVDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1418 Broken Link
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1738 Broken Link
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2068 Broken Link
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2006-2492 US Government Resource