NVD

Id
62318  
Name
CVE-2006-3650  
Description
Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac do not properly parse the length of a chart record, which allows remote user-assisted attackers to execute arbitrary code via a Word document with an embedded malformed chart record that triggers an overwrite of pointer values with values from the document, a different vulnerability than CVE-2006-3434, CVE-2006-3864, and CVE-2006-3868.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-10-10  
Modified Date
2011-03-07  
Seq
2006-3650  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
322984 62318 CVE-2006-3650 oval:org.mitre.oval:def:222  View
322985 62318 CVE-2006-3650 1017034  View
322986 62318 CVE-2006-3650 VU#534276  View
322987 62318 CVE-2006-3650 MS06-062  View
322988 62318 CVE-2006-3650 20061010 ZDI-06-034: Microsoft Office Word Malformed Chart Code Execution Vulnerability  View
322989 62318 CVE-2006-3650 SSRT061264  View
322990 62318 CVE-2006-3650 20383  View
322991 62318 CVE-2006-3650 ADV-2006-3981  View
322992 62318 CVE-2006-3650 http://www.zerodayinitiative.com/advisories/ZDI-06-034.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58488 JVNDB-2006-000684 Microsoft Office の不正なグラフレコード処理によるメモリ破壊の脆弱性 Microsoft Office には不正なグラフレコードの処理に不備が存在するため、メモリ領域が破壊される脆弱性が存在します。 CVE-2006-3650 19752 CVE-2006-3650 62318 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000684.html 2006-10-10 2007-04-01 View