CVE

Id
17415  
CVE No.
CVE-2006-1311  
Status
Candidate  
Description
The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning Essentials for Microsoft Office 1.0, 1.1, and 1.5 allows user-assisted remote attackers to execute arbitrary code via a malformed OLE object in an RTF file, which triggers memory corruption.  
Phase
Assigned (20060320)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
144033 17415 CVE-2006-1311 MS:MS07-013  View
144034 17415 CVE-2006-1311 URL:http://www.microsoft.com/technet/security/Bulletin/MS07-013.mspx  View
144035 17415 CVE-2006-1311 CERT:TA07-044A  View
144036 17415 CVE-2006-1311 URL:http://www.us-cert.gov/cas/techalerts/TA07-044A.html  View
144037 17415 CVE-2006-1311 CERT-VN:VU#368132  View
144038 17415 CVE-2006-1311 URL:http://www.kb.cert.org/vuls/id/368132  View
144039 17415 CVE-2006-1311 BID:21876  View
144040 17415 CVE-2006-1311 URL:http://www.securityfocus.com/bid/21876  View
144041 17415 CVE-2006-1311 VUPEN:ADV-2007-0582  View
144042 17415 CVE-2006-1311 URL:http://www.vupen.com/english/advisories/2007/0582  View
144043 17415 CVE-2006-1311 OSVDB:31886  View
144044 17415 CVE-2006-1311 URL:http://www.osvdb.org/31886  View
144045 17415 CVE-2006-1311 OVAL:oval:org.mitre.oval:def:1090  View
144046 17415 CVE-2006-1311 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1090  View
144047 17415 CVE-2006-1311 SECTRACK:1017640  View
144048 17415 CVE-2006-1311 URL:http://www.securitytracker.com/id?1017640  View
144049 17415 CVE-2006-1311 SECTRACK:1017641  View
144050 17415 CVE-2006-1311 URL:http://www.securitytracker.com/id?1017641  View
144051 17415 CVE-2006-1311 SECUNIA:24152  View
144052 17415 CVE-2006-1311 URL:http://secunia.com/advisories/24152  View
144053 17415 CVE-2006-1311 XF:ms-richedit-code-execution(30592)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58138 JVNDB-2006-000334 Microsoft Windows の不正な Jscript オブジェクトに任意のコードを実行される脆弱性 Microsoft Windows には、特定の状況下において Jscript オブジェクトを早期に開放してしまうため、メモリ領域を破壊される脆弱性が存在します。 CVE-2006-1313 17415 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000334.html  View