QwikSec

Security Database

CVE

CWE

Training

CVE-2006-6561

Published: Dec 14, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted DOC file that triggers memory corruption, as demonstrated via the 12122006-djtest.doc file, a different issue than CVE-2006-5994 and CVE-2006-6456.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_BID

http://blogs.technet.com/msrc/archive/2006/12/15/update-on-current-word-vulnerability-reports.aspx

x_refsource_CONFIRM

vdb-entry

x_refsource_SECTRACK

http://www.infoworld.com/article/06/12/13/HNthirdword_1.html

x_refsource_MISC

http://www.milw0rm.com/sploits/12122006-djtest.doc

x_refsource_MISC

20061212 Re: Re: The newest Word flaw is due to malformed data structure handling

mailing-list

x_refsource_BUGTRAQ

http://research.eeye.com/html/alerts/zeroday/20061212.html

x_refsource_MISC

third-party-advisory

x_refsource_CERT-VN

vdb-entry

x_refsource_VUPEN

http://blogs.securiteam.com/?p=763

x_refsource_MISC

word-pointer-code-execution(30885)

vdb-entry

x_refsource_XF

oval:org.mitre.oval:def:332

vdb-entry

signature

x_refsource_OVAL

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.