CVE-2006-4534
37Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Attendepss 34%
from disclosure to weapon
Published on NVDSep 5
VulnCheck+35d
exploitation probability
34%top 2% of all CVEs
observed exploitation
yesVulnCheck
Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo.
Affected products
n/a · n/aReferences
http://blogs.securiteam.com/?p=586http://isc.sans.org/diary.php?storyid=1669https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-060http://secunia.com/advisories/21735http://securitytracker.com/id?1016787https://exchange.xforce.ibmcloud.com/vulnerabilities/28775https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A578http://support.microsoft.com/kb/925059http://vil.mcafeesecurity.com/vil/content/v_119055.htmhttp://www.kb.cert.org/vuls/id/806548http://www.microsoft.com/technet/security/advisory/925059.mspxhttp://www.osvdb.org/28539