Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2006-4534

Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo.

Published

2006-09-05T17:04:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	microsoft	office	2000	Yes
Application	microsoft	office	2000	Yes
Application	microsoft	office	2000	Yes
Application	microsoft	office	2000	Yes
Application	microsoft	office	2000	Yes
Application	microsoft	office	2000	Yes
Application	microsoft	office	2000	Yes
Application	microsoft	office	2001	Yes
Application	microsoft	office	2001	Yes
Application	microsoft	office	2001	Yes
Application	microsoft	office	2003	Yes
Application	microsoft	office	2003	Yes
Application	microsoft	office	2003	Yes
Application	microsoft	office	2003	Yes

References

http://blogs.securiteam.com/?p=586 Third Party Advisory ([email protected])
http://isc.sans.org/diary.php?storyid=1669 Third Party Advisory ([email protected])
http://secunia.com/advisories/21735 Vendor Advisory ([email protected])
http://securitytracker.com/id?1016787 Third Party Advisory, VDB Entry ([email protected])
http://support.microsoft.com/kb/925059 Patch, Vendor Advisory ([email protected])
http://vil.mcafeesecurity.com/vil/content/v_119055.htm Third Party Advisory ([email protected])
http://www.kb.cert.org/vuls/id/806548 Third Party Advisory, US Government Resource ([email protected])
http://www.microsoft.com/technet/security/advisory/925059.mspx Patch, Vendor Advisory ([email protected])
http://www.osvdb.org/28539 Broken Link ([email protected])
http://www.securityfocus.com/archive/1/445162/100/100/threaded ([email protected])
http://www.securityfocus.com/archive/1/445285/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/445381/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/449179/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/449179/100/0/threaded ([email protected])
http://www.securityfocus.com/bid/19835 Third Party Advisory, VDB Entry ([email protected])
http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2006-090219-2855-99 Third Party Advisory ([email protected])
http://www.vupen.com/english/advisories/2006/3448 Vendor Advisory ([email protected])
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-060 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/28775 Third Party Advisory, VDB Entry ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A578 Third Party Advisory ([email protected])
http://blogs.securiteam.com/?p=586 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://isc.sans.org/diary.php?storyid=1669 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21735 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1016787 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://support.microsoft.com/kb/925059 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://vil.mcafeesecurity.com/vil/content/v_119055.htm Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/806548 Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.microsoft.com/technet/security/advisory/925059.mspx Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/28539 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/445162/100/100/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/445285/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/445381/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/449179/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/449179/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/19835 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2006-090219-2855-99 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3448 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-060 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/28775 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A578 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)