NVD

Id
62167  
Name
CVE-2006-3493  
Description
Buffer overflow in LsCreateLine function (mso_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly other products in Microsoft Office 2003, 2002, and 2000, allows remote user-assisted attackers to cause a denial of service (crash) via a crafted Word DOC or other Office file type. NOTE: this issue was originally reported to allow code execution, but on 20060710 Microsoft stated that code execution is not possible, and the original researcher agrees.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-07-10  
Modified Date
2016-11-18  
Seq
2006-3493  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
322068 62167 CVE-2006-3493 http://blogs.technet.com/msrc/archive/2006/07/10/441006.aspx  View
322069 62167 CVE-2006-3493 20060707 MS Word Unchecked Boundary Condition Vulnerability - POC  View
322070 62167 CVE-2006-3493 20060707 MS Word Unchecked Boundary Condition  View
322071 62167 CVE-2006-3493 20060711 Fuzzing Microsoft Office  View
322072 62167 CVE-2006-3493 1016453  View
322073 62167 CVE-2006-3493 20060710 MS Word Unchecked Boundary Condition Vulnerability  View
322074 62167 CVE-2006-3493 20060711 Fuzzing Microsoft Office  View
322075 62167 CVE-2006-3493 18905  View
322076 62167 CVE-2006-3493 ADV-2006-2720  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58176 JVNDB-2006-000372 Microsoft Word の LsCreateLine() 関数におけるメモリアクセスエラーの脆弱性 Microsoft Word の mso.dll には、 LsCreateLine() 関数において、特定の .doc ファイルを扱う際の境界チェックが不適切であるため、不正な .doc ファイルを処理した場合、メモリアクセスエラーが発生する脆弱性が存在します。 CVE-2006-3493 19595 CVE-2006-3493 62167 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000372.html 2006-07-09 2007-04-01 View