CVE-2006-0009observed exploitation

CVE-2006-0009

Published · Updated

30Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Attendepss 14%
from disclosure to weapon
Published on NVDMar 14
VulnCheckMar 14
exploitation probability
14%top 3% of all CVEs
observed exploitation
yesVulnCheck
Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint.
Affected products
n/a · n/a
References
http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0597.htmlhttp://blogs.securiteam.com/?author=28http://blogs.securiteam.com/?p=557http://blogs.securiteam.com/?p=559http://isc.sans.org/diary.php?storyid=1618http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049540.htmlhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012http://secunia.com/advisories/19138http://secunia.com/advisories/19238http://securitytracker.com/id?1015766http://securitytracker.com/id?1016720http://securitytracker.com/id?1016886